Security Architect in Hayes

Rackspace Technology™ is a leading end-to-end, hybrid cloud and AI solutions company. We can design, build, and operate our customers' cloud environments across all major technology platforms, irrespective of technology stack or deployment model. We partner with our customers at every stage of their cloud journey, enabling them to modernize applications, build new products, and adopt innovative technologies.

Job Summary: Expert in designing security framework, standards, policies, controls, strategies etc. required when building a private cloud. Designs and develops solutions to business problems in alignment with the enterprise architecture direction and standards in client-facing atmosphere. Performs technical assessments, reviews, planning, architecture development and modification of specifications. Develops specifications for new products/services, applications and service offerings. Assess and challenge the compatibility and integration of security products/services proposed by third parties in order to ensure an integrated architecture across interdependent technologies is proposed and delivered.

Location: on-site with a customer in Central London.

Key Responsibilities:

• Dual Internal and Customer facing role supporting Rackspace Sovereign Services business unit and their NHS, Government and Regulated Industry customer base.
• Supervises tasks for effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data.
• Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices.
• Consults on security direction, maintaining a vigil over prudent assurance of the information and information systems assets.
• Oversees problems of significant scope where analysis of situations or data requires a review of a variety of factors.
• Plans and delivers communications for the successful deployment of security controls.
• Cooperates with Security Operations in regards to implementing recommend corrective actions.
• Analyzes gaps between current and target security architecture and develops and implements roadmaps and plans to close gaps.
• Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
• Provide guidance for Cyber Assessment Framework and DSPT toolkit.
• Develop, communicate and implement the security architecture framework (based on ISO 27001/27002 and NIST 800-53).
• Embed Rackspace’s information security policies, standards and procedures into IT services methodologies.
• Proactively work with the Rackspace Sovereign Services security team to ensure all security components are appropriately integrated into the overall architecture strategy.
• Assist Rackspace Sovereign Services Product team on the appropriate implementation of Rackspace information security policies and standards.
• Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture.
• Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented.
• Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
• Help educate Rackspace Sovereign Services on the requirements within the Rackspace information security governance framework.
• Design and integrate security baseline standards for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.).
• Advise in the development of the security product strategy and roadmaps for the various internal and customer facing security offerings.
• Join client calls and drive conversations on security controls, policies, and standards.
• Other incidental tasks related to the job, as necessary.

Required Knowledge:

• Advanced knowledge of NHS and healthcare environments, including security, clinical data protection, and regulatory requirements, with the ability to translate these needs into secure sovereign cloud architectures.
• Advanced knowledge of Rackspace infrastructure and architecture and business impact of technologies.
• Advanced technical knowledge in multiple areas, such as the IT industry, general technologies and operating systems, product development processes and business operations.
• Advanced technical knowledge in technology troubleshooting methodologies, design, and implementation.

Required Skills:

• AI/Machine Learning
• Cloud Computing
• Cybersecurity
• DevOps
• Coding Skills
• Network/Systems Skills

Certifications:

• CISSP - essential
• ISSAP - highly preferred
• CISM, GIAC or other vendor (Cisco, Microsoft SC100, etc) - preferred.