Security Architect IV in Cardiff

Job Summary

Expert in designing security framework, standards, policies, controls, strategies etc. required when building a private cloud. Designs and develops solutions to business problems in alignment with the enterprise architecture direction and standards in client-facing atmosphere. Performs technical assessments, reviews, planning, architecture development and modification of specifications. Develops specifications for new products/services, applications and service offerings. Assess and challenge the compatibility and integration of security products/services proposed by third parties in order to ensure an integrated architecture across interdependent technologies is proposed and delivered.

Location

Hybrid in Cardiff or London (Hayes)

Key Responsibilities

• Dual Internal and Customer facing role supporting Rackspace Sovereign Services business unit and their NHS, Government and Regulated Industry Customer base
• Supervises tasks for effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data.
• Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices.
• Consults on security direction, maintaining a vigil over prudent assurance of the information and information systems assets.
• Oversees problems of significant scope where analysis of situations or data requires a review of a variety of factors.
• Plans and delivers communications for the successful deployment of security controls.
• Cooperates with Security Operations in regards to implementing recommend corrective actions.
• Analyzes gaps between current and target security architecture and develops and implements roadmaps and plans to close gaps.
• Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
• Provide guidance for Cyber Assessment Framework and DSPT toolkit.
• Develop, communicate and implement the security architecture framework (based on ISO 27001/27002 and NIST 800-53).
• Embed Rackspace’s information security policies, standards and procedures into IT services methodologies.
• Proactively work with the Rackspace Sovereign Services security team to ensure all security components are appropriate integrated into the overall architecture strategy.
• Assist Rackspace Sovereign Services Product team on the appropriate implementation of Rackspace information security policies and standards.
• Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture
• Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented.
• Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
• Help educate Rackspace Sovereign Services on the requirements within the Rackspace information security governance framework.
• Design and integrate security baseline standards for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.)
• Advise in the development of the security product strategy and roadmaps for the various internal and customer facing security offerings.
• Join client calls and drive conversations on security controls, policies, and standards.
• Other Incidental tasks related to the job, as necessary.

Required Knowledge

• Advanced knowledge of Rackspace infrastructure and architecture and business impact of technologies
• Advanced technical knowledge in multiple areas, such as the IT industry, general technologies and operating systems, product development processes and business operations
• Advanced technical knowledge in technology troubleshooting methodologies, design, and implementation
• Requires specialized depth and/or breadth of expertise in own job discipline or field
• Leads others to solve complex problems
• Works independently, with guidance in only the most complex situations May provide functional leadership to teams or projects

Required Skills

• Cloud Computing
• Cybersecurity
• DevOps Coding Skills
• Network/Systems Skills

Certifications

• ISSAP - highly preferred
• CISM, GIAC or other vendor (Cisco, Microsoft SC100, etc) - preferred.