Security Architect IV

Rackspace Technology; Cardiff; Hybrid; GBP 85,000 - 120,000; Full time

Job summary

Rackspace Technology is seeking an expert to design and implement security frameworks for private cloud environments. The role involves leading threat modeling, risk assessments, and governance while aligning solutions with enterprise standards.

Responsibilities include embedding security policies into IT services, collaborating with clients and Rackspace Sovereign Services teams, and guiding security product strategies and roadmaps.

Qualifications

• Advanced knowledge of Rackspace infrastructure and architecture.
• Experience designing security frameworks, policies and controls for private cloud.
• Threat modeling, risk assessments, governance and security program delivery.

Responsibilities

• Lead design and implementation of security controls across the architecture.
• Collaborate with cross-functional teams and client stakeholders on security requirements.
• Assess third‑party security products for integration and alignment with standards.
• Guide security strategy and roadmaps, embedding policies into services.

Skills

Cloud Computing

Cybersecurity

DevOps Coding Skills

Network/Systems Skills

Job description

Job Summary

Expert in designing security framework, standards, policies, controls, strategies etc. required when building a private cloud. Designs and develops solutions to business problems in alignment with the enterprise architecture direction and standards in client-facing atmosphere. Performs technical assessments, reviews, planning, architecture development and modification of specifications. Develops specifications for new products/services, applications and service offerings. Assess and challenge the compatibility and integration of security products/services proposed by third parties in order to ensure an integrated architecture across interdependent technologies is proposed and delivered.

Location

Hybrid in Cardiff or London (Hayes)

Key Responsibilities

• Dual Internal and Customer facing role supporting Rackspace Sovereign Services business unit and their NHS, Government and Regulated Industry Customer base
• Supervises tasks for effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data.
• Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices.
• Consults on security direction, maintaining a vigil over prudent assurance of the information and information systems assets.
• Oversees problems of significant scope where analysis of situations or data requires a review of a variety of factors.
• Plans and delivers communications for the successful deployment of security controls.
• Cooperates with Security Operations in regards to implementing recommend corrective actions.
• Analyzes gaps between current and target security architecture and develops and implements roadmaps and plans to close gaps.
• Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
• Provide guidance for Cyber Assessment Framework and DSPT toolkit.
• Develop, communicate and implement the security architecture framework (based on ISO 27001/27002 and NIST 800-53).
• Embed Rackspace’s information security policies, standards and procedures into IT services methodologies.
• Proactively work with the Rackspace Sovereign Services security team to ensure all security components are appropriate integrated into the overall architecture strategy.
• Assist Rackspace Sovereign Services Product team on the appropriate implementation of Rackspace information security policies and standards.
• Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture
• Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented.
• Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
• Help educate Rackspace Sovereign Services on the requirements within the Rackspace information security governance framework.
• Design and integrate security baseline standards for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.)
• Advise in the development of the security product strategy and roadmaps for the various internal and customer facing security offerings.
• Join client calls and drive conversations on security controls, policies, and standards.
• Other Incidental tasks related to the job, as necessary.

Required Knowledge

• Advanced knowledge of Rackspace infrastructure and architecture and business impact of technologies
• Advanced technical knowledge in multiple areas, such as the IT industry, general technologies and operating systems, product development processes and business operations
• Advanced technical knowledge in technology troubleshooting methodologies, design, and implementation
• Requires specialized depth and/or breadth of expertise in own job discipline or field
• Leads others to solve complex problems
• Works independently, with guidance in only the most complex situations May provide functional leadership to teams or projects

Required Skills

• Cloud Computing
• Cybersecurity
• DevOps Coding Skills
• Network/Systems Skills

Certifications

• ISSAP - highly preferred
• CISM, GIAC or other vendor (Cisco, Microsoft SC100, etc) - preferred.