Cyber Design Lead

Salary: £? - ? per year

Requirements

• Strong cybersecurity background in one or more of the following: Identity and Access Management (IAM), Security Operations and Incident Response, Threat and Vulnerability Management, Cloud Security, Infrastructure Security, Network Security, Application Security, Data Security, or Cryptography
• Experience working on large-scale IT and cybersecurity transformation programmes
• Strong understanding of Enterprise Architecture and Solution Architecture
• Ability to communicate complex security concepts to technical and non-technical stakeholders
• Knowledge of security governance, risk management, threats, vulnerabilities, and incident response
• At least 3 years experience with HashiCorp Vault, preferably on-premises
• At least 3 years experience using Terraform, including developing complex reusable modules
• Strong experience integrating Vault, including secret engines, authentication methods, and reusable integration patterns
• Experience troubleshooting and resolving Vault integration issues
• Experience designing or implementing Workload Identity Frameworks
• Ability to define and influence enterprise secrets management strategy
• Knowledge of federated identity management, Single Sign-On (SSO), Privileged Access Management (PAM), and authentication protocols including Kerberos, OAuth, and SAML
• Preferred certifications: CISSP, CISM, SABSA, or TOGAF
• Familiarity with Jira and Confluence
• Must be eligible for BPSS clearance

Responsibilities

• Own end-to-end solution design across cybersecurity initiatives
• Produce and maintain solution designs, architecture design documents, high-level designs, architecture patterns, decision records, risk assessments, and technical governance artefacts
• Translate business requirements into secure architecture solutions
• Identify and manage design deviations and technical debt
• Document and mitigate technical risks and issues, define remediation plans, and escalate risks when needed
• Ensure solutions are efficient, scalable, and cost-effective
• Promote strong documentation standards and governance
• Present designs through governance and design authority processes
• Ensure architecture artefacts undergo peer review and gain approval for patterns, designs, risks, and deviations
• Explain the impact of design decisions on risk and delivery
• Provide technical leadership and act as a subject matter expert across programmes
• Lead and mentor architects, engineers, and analysts
• Support programme management activities when required

Technologies:

• Architect
• Cloud
• Cryptography
• Confluence
• IAM
• Support
• JIRA
• Network
• OAuth
• SAML
• Security
• TOGAF
• Terraform
• DevOps

More:

We are recruiting a Cyber Design Lead / Design Engineer for a role based in Sheffield, running from December with an extension highly likely. The working pattern is three days onsite per week, and the day rate is dependent on experience. We are seeking a senior cyber architect or design lead with deep IAM and HashiCorp Vault expertise, strong architecture governance experience, and a record of delivering security designs in large enterprise environments, ideally in regulated sectors. The role includes presenting solutions to design authorities, senior stakeholders, and leadership teams, and providing technical leadership across cybersecurity transformation programmes. Hays Specialist Recruitment Limited is acting as an employment agency for permanent recruitment and an employment business for the supply of temporary workers; applications are subject to its terms, privacy policy, and disclaimers.

last updated 40 week of 2026