Cyber Security Architect
Summary
Senior consulting role in OneStep Group's Cyber Security Professional Services team: lead end-to-end client engagements designing and implementing security solutions across network, endpoint, identity and cloud, drive Essential Eight and Zero Trust uplift, and strengthen SIEM/detection engineering, largely on the Microsoft stack (Defender, Sentinel, Entra, Intune) and Azure/AWS.
Design the solution. Lead the delivery. See the impact.
Turn security strategy into something that works in the real world. Lead the design. Drive the implementation. Validate the results. As a Cyber Security Architect at OneStep Group, you’ll help clients move from recommendations to practical, measurable improvements.
Join OneStep Group’s Cyber Security Professional Services team and lead complex client engagements from discovery and design through to implementation, validation and operational handover.
This senior technical role brings together security architecture, engineering and consulting. You’ll turn business risks into practical security solutions, work closely with client technology leaders, and help shape our cyber security services.
What you’ll do- Lead end-to-end security engagements across cloud, hybrid and on-premises environments.
- Design and implement security solutions spanning networks, endpoints, identity, privileged access, cloud and data protection.
- Drive Essential Eight uplift and Zero Trust initiatives, translating recommendations into implemented and validated controls.
- Strengthen detection and response capabilities through SIEM architecture, detection engineering and integration with security operations teams.
- Guide clients through technical decisions, leading workshops and developing clear architectures, implementation plans and improvement roadmaps.
- Help develop the practice through mentoring, reusable delivery methods, technical presales and new service offerings.
You’ll combine deep technical expertise with the ability to build trusted client relationships and take ownership of delivery.
- Substantial experience—typically eight or more years—in security architecture, engineering, detection engineering or technical consulting.
- A track record of leading complex enterprise engagements from discovery through to handover.
- Strong architecture and hands-on engineering capability across network, endpoint, identity and cloud security, with deep expertise in several areas.
- Practical experience implementing and validating Essential Eight controls, alongside knowledge of Zero Trust, NIST CSF and ISO 27001.
- Experience with relevant combinations of Microsoft Defender, Sentinel, Entra and Intune, or comparable enterprise platforms.
- Knowledge of secure network design, firewalls, segmentation, identity protection and cloud security controls across Azure and/or AWS.
- Experience with SIEM, detection engineering, telemetry integration and SOC requirements, supported by working knowledge of MITRE ATT&CK.
- Clear communication, stakeholder management and mentoring skills, plus sound scope management and effort estimation.
Consulting or managed security services experience would be valuable, as would exposure to regulated sectors, security automation, technical presales or service development. Relevant qualifications or equivalent professional experience, and certifications such as CISSP, CISM, Microsoft, AWS, Cisco or GIAC, are desirable.
Why this role?- Stay hands-on while leading architecture: take solutions beyond design into implementation and measurable outcomes.
- Work across varied client environments: apply your expertise to complex technical and business challenges.
- Influence the practice: contribute to technical standards, service offerings and the development of consultants and engineers.
- Connect strategy with delivery: work across architecture, engineering, governance and security operations.