Job Description:

DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.

Technical Security Architect

Location: Hampshire (5 days per week onsite)

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

The Technical Security Architect is responsible for designing, developing, and maintaining technical security architectures that protect the organisation's information systems, data, and infrastructure. Embedded within the Technical team, this role leads the tech refresh and evergreening of security toolsets - ensuring the security technology estate remains current, supported, effective, and aligned with evolving threat landscapes, client policies, and cross-domain architectural patterns.

This is a hands-on architecture role, not a governance-only position. The Technical Security Architect is expected to produce detailed technical designs, evaluate and select security technologies, define integration patterns, and guide implementation teams through delivery. The role requires deep technical expertise across cloud security, identity and access management, boundary and perimeter security, secure platform architectures, and security tooling ecosystems.

Key Responsibilities

• Design and deliver security architectures across cloud, on-premise, hybrid and air-gapped environments.
• Produce technical designs including HLDs, LLDs, architecture patterns and data-flow diagrams.
• Lead the refresh and evergreening of security technologies, including IAM, PAM, firewalls, EDR/XDR, SIEM, vulnerability management and cloud security.
• Evaluate new technologies through PoCs/PoVs and make clear, evidence-based recommendations.
• Design and review cloud, identity, network, perimeter and platform security solutions.
• Apply Zero Trust, defence-in-depth and threat-informed design principles.
• Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements.
• Act as a security design authority, providing technical guidance and architectural decisions.
• Work closely with enterprise, infrastructure, network and application architects to embed security across the technology landscape.
• Support security accreditation, risk assessments and client security reviews.
• Keep pace with emerging threats and technologies and identify opportunities to improve and simplify the security estate.

What you'll bring

• Significant experience as a Technical Security Architect, Security Architect or Senior Security Engineer.
• Strong technical expertise across multiple security domains, particularly IAM, network security, cloud security, endpoint security and secure platforms.
• Proven experience delivering security technology refresh, migration or modernisation programmes.
• Strong experience with AWS, Azure and/or GCP security architecture.
• Experience producing detailed technical architecture documentation.
• Strong understanding of threat modelling, risk and security architecture principles.
• Experience working within complex, regulated or formally accredited environments.
• Excellent communication skills and the ability to influence both technical and senior stakeholders.
• CISSP (or equivalent) and TOGAF and/or SABSA.

Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.