Technical Architect

Job Description

Technical Architect\n\n+DV cleared contract \n\n+On site in London\n\n+6 months +\n\n+Outside IT35\n\n+£650 - £700 a day \n\nSkills:\n\n+DV clearance\n\n+CCNP\n\n+Vmware\n\n+HLD / LLD\n\nWe are seeking a highly experienced Technical Architect to join a secure, high-profile programme. The role requires someone with deep expertise across data centre networking, private cloud, security, and automation - with the ability to lead architecture, design, and governance at the highest level.\n\nKey Responsibilities\n\nArchitecture & Design - Develop HLDs, LLDs, and build guides for end-to-end infrastructure solutions. Ensure alignment with security frameworks (Secure By Design, NCSC CAF, NIST 800-53).\n\nNetworking & Security - Architect secure, multi-tenant data centre networks (Clos-fabric, advanced BGP, DCI).

Implement strong security using Palo Alto firewalls, VMware NSX-T micro-segmentation, and cross-domain solutions.\n\nCompute & Virtualisation - Design/manage VMware VCF private cloud platforms, VxRail/vSAN hyper-converged compute, and software-defined networking.\n\nPlatform & Application Services - Deliver containerisation, secrets management, and enterprise messaging systems (Docker, RabbitMQ).\n\nGovernance & Leadership - Present to the Technical Design Authority, act as SME for infrastructure stack, and enforce CIS/STIG compliance.\n\nAutomation - Drive Infrastructure as Code (IaC) adoption and automated infrastructure deployment.\n\nCore Technical Expertise\n\nData Centre Networking - Clos-fabric, VRFs, EBGP, ECMP, active/active DCI.\n\nNetwork Security - Palo Alto firewalls, high-grade crypto.\n\nPrivate Cloud & HCI - VMware VCF, VxRail/vSAN, Veeam.\n\nSoftware-Defined Networking (SDN) - VMware NSX-T (Geneve overlays, Edge Node config, DFW, NSX Federation).\n\nSecurity Architecture - Multi-tier secure environments (DMZs, CDS, Diodes/HAGs, AV - Trellix ).\n\nOperating Systems - Senior Linux (Ubuntu) & Windows (Server 2025, SQL 2022, AD, PKI, MECM).\n\nApplication Platforms - Docker, CI/CD pipelines, secrets management, object storage (S3).\n\nEUC - Omnissa Horizon, UAGs, Zero/Thin client environments.\n\nDesirable Skills\n\nEVPN/VXLAN, Fortigate, Panorama, VMware SSP (vDefend).\n\nIaC (Terraform, Ansible), CI/CD (GitLab), Python orchestration.\n\nObservability (Prometheus, Grafana), SIEM (Splunk, Aria Logs).\n\nAdvanced VMware: SRM, Avi Load Balancer, Workspace ONE.\n\nApplication/data platforms: Kubernetes, Vault, Redis, RabbitMQ, Elastic Stack.\n\nDell Powerscale & NVIDIA GPU passthrough experience.\n\nProfessional Skills & Qualifications\n\nProven ability to lead design workshops & governance board presentations.\n\nStrong documentation skills (HLDs, LLDs, Build Guides).\n\nKnowledge of CIS, STIG, and NIST 800-53 frameworks.\n\nCertifications such as CISSP, CCNP (or equivalent experience) desirable.\n\nIf you'd like to discuss this Technical Architect role in more detail, please send your updated CV to (url removed) and I will get in touch