Solution Architect (Technical Advisory) Retail Hybrid: 3 days onsite in either London or Welwyn - wherever is closest to you 6 months £750 - £800 per day In short: Solution Architect with broad experience across data, network, infrastructure, application required to advise multiple technical teams on a strategy to rebuild an environment in the case of a total loss event. In full: As a Solutions Architect you will be working with the Security Architecture team with speciality skills in advising and help scale our security presence across the wider technology and infrastructure teams. Candidates must have broad exposure to solution-level architecture for software and data systems, covering technology stacks across · hosting infrastructure that is on-premise, private cloud and Azure public cloud · technical component connectivity access considerations within a system and between systems. In this role, candidates will be responsible holding deep-dive technical sessions with development teams and provide guidance on what is a total loss event (i.e., total unavailability of systems and major disruption to business services), what the teams should think about from a system's perspectives that is required for ground-up rebuild of their systems, and how to export/document the system & component-level config that is required to rebuild the system from scratch. Also have great advisory skills to collaborate with development teams and provide the required technical guidance for them to act on the process/steps defined for recovery from total loss event. The role: · Provide engineering and product teams with direction and guidance for all security matters. · Help product teams deliver new business features securely while balancing and clearly articulating technical and business risk. · You will be expected to drive the deployment/integration of security capabilities into engineering teams within the product domain. · You will drive security initiatives such as developing security requirements, threat modelling, strengthening application security, vulnerability reduction, etc., with the engineering teams. · Reducing friction is paramount and we are all about fast feedback within existing workflows. · Support teams in a collaborative manner in matters of mobile application, web application, cloud and data security, with threat modelling, risk treatment and security advice across all security domains. · Facilitate risk remediation but also challenge decisions and status-quo. · Facilitate in assurance activities like penetration testing, purple testing, app assurance. · Build quarterly/monthly roadmaps for security activities and plan them. Skills required: · A thorough understanding of modern application development practices so that security capabilities can be introduced and embedded while minimising developer friction. · Excellent interpersonal, facilitation, and leadership skills along with effective communication (both written and verbal) skills. · Be able to provide security guidance to engineering teams throughout the product development lifecycle. · Be able to develop threat models, attack trees, and embed security by design in product engineering effort. · Good understanding of software architecture, dev-sec-ops, and network security Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.