Security Architect

Rackspace US, Inc.; Greater London; On-site; GBP 90,000 - 125,000; Full time

Job summary

Rackspace Technology is seeking an experienced Security Architect to design and govern security frameworks for private cloud environments. You will lead architecture reviews, threat modeling, and the development of secure solutions aligned with enterprise standards.

This client-facing role requires deep NHS/healthcare knowledge and the ability to translate security needs into architecture. Based in Central London, on-site with a customer, you will collaborate with Sovereign Services and product

Qualifications

• Advanced knowledge of NHS and healthcare regulatory requirements.
• Deep understanding of Rackspace architecture and business impact.
• Broad IT technologies knowledge across OS and product development processes.
• Advanced technical proficiency across multiple IT domains.

Responsibilities

• Lead design of data and system security controls for private cloud environments.
• Perform threat modeling and plan security roadmaps.
• Coordinate with Security Operations and project teams on remediation.
• Ensure security architectures align with enterprise standards.
• Embed Rackspace security policies into IT services methodologies.
• Guide in governance for regulated customers and compliance efforts.

Skills

Security architecture

Threat modeling

Stakeholder communication

Regulatory compliance

Tools

ISO 27001/27002

NIST 800-53

Cloud security tooling

Job description

Rackspace Technology™ is a leading end-to-end, hybrid cloud and AI solutions company. We can design, build, and operate our customers' cloud environments across all major technology platforms, irrespective of technology stack or deployment model. We partner with our customers at every stage of their cloud journey, enabling them to modernize applications, build new products, and adopt innovative technologies. Named a best place to work by Newsweek and Forbes, we attract and develop world-class talent to deliver a Fanatical Experience™ - so our customers can achieve better outcomes and stay ahead of what's next.

Job Summary

We are seeking an experienced Security Architect with expertise in designing the security frameworks, standards, policies, controls, and strategies required to build and operate private cloud environments. In this client-facing role, you will design and develop solutions that address complex business challenges while aligning with enterprise architecture principles and technology standards. You will lead technical assessments, architecture reviews, strategic planning activities, and the development of secure solution architectures. The role also involves defining specifications for new products, services, and service offerings, while evaluating and challenging third-party security solutions to ensure compatibility, integration, and alignment with the broader enterprise architecture. Success in this position requires the ability to drive cohesive, end-to-end security designs across interconnected technologies and platforms.

Location

on-site with a customer in Central London.

Key Responsibilities

• Dual Internal and Customer facing role supporting Rackspace Sovereign Services business unit and their NHS, Government and Regulated Industry customer base.
• Supervises tasks for effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data.
• Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices.
• Consults on security direction, maintaining a vigil over prudent assurance of the information and information systems assets.
• Oversees problems of significant scope where analysis of situations or data requires a review of a variety of factors.
• Plans and delivers communications for the successful deployment of security controls.
• Cooperates with Security Operations in regards to implementing recommend corrective actions.
• Analyzes gaps between current and target security architecture and develops and implements roadmaps and plans to close gaps.
• Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
• Provide guidance for Cyber Assessment Framework and DSPT toolkit.
• Develop, communicate and implement the security architecture framework (based on ISO 27001/27002 and NIST 800-53).
• Embed Rackspace's information security policies, standards and procedures into IT services methodologies.
• Proactively work with the Rackspace Sovereign Services security team to ensure all security components are appropriate integrated into the overall architecture strategy.
• Assist Rackspace Sovereign Services Product team on the appropriate implementation of Rackspace information security policies and standards.
• Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture
• Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented.
• Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
• Help educate Rackspace Sovereign Services on the requirements within the Rackspace information security governance framework.
• Design and integrate security baseline standards for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.)
• Advise in the development of the security product strategy and roadmaps for the various internal and customer facing security offerings.
• Join client calls and drive conversations on security controls, policies, and standards.
• Other Incidental tasks related to the job, as necessary.

Required Knowledge

• Advanced knowledge of NHS and healthcare environments, including security, clinical data protection, and regulatory requirements, with the ability to translate these needs into secure sovereign cloud architectures.
• Advanced knowledge of Rackspace infrastructure and architecture and business impact of technologies
• Advanced technical knowledge in multiple areas, such as the IT industry, general technologies and operating systems, product development processes and business operations
• Advanced technical