Security Architect IV

Rackspace Technology™ is a leading end-to-end, hybrid cloud and AI solutions company. We can design, build, and operate our customers' cloud environments across all major technology platforms, irrespective of technology stack or deployment model. We partner with our customers at every stage of their cloud journey, enabling them to modernize applications, build new products, and adopt innovative technologies. Named a best place to work by Newsweek and Forbes, we attract and develop world-class talent to deliver a Fanatical Experience™ – so our customers can achieve better outcomes and stay ahead of what’s next.

Job Summary

Expert in designing security framework, standards, policies, controls, strategies, etc. required when building a private cloud. Designs and develops solutions to business problems in alignment with the enterprise architecture direction and standards in client-facing atmosphere. Performs technical assessments, reviews, planning, architecture development, and modification of specifications. Develops specifications for new products/services, applications, and service offerings. Assess and challenge the compatibility and integration of security products/services proposed by third parties in order to ensure an integrated architecture across interdependent technologies is proposed and delivered.

Location: Hybrid in Cardiff or London (Hayes)

Key Responsibilities

• Dual Internal and Customer-facing role supporting Rackspace Sovereign Services business unit and their NHS, Government, and Regulated Industry Customer base
• Supervises tasks for effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data.
• Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices.
• Consults on security direction, maintaining a vigil over prudent assurance of the information and information systems assets.
• Oversees problems of significant scope where analysis of situations or data requires a review of a variety of factors.
• Plans and delivers communications for the successful deployment of security controls.
• Cooperates with Security Operations in regards to implementing recommended corrective actions.
• Analyzes gaps between current and target security architecture and develops and implements roadmaps and plans to close gaps.
• Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
• Provide guidance for Cyber Assessment Framework and DSPT toolkit.
• Develop, communicate, and implement the security architecture framework (based on ISO 27001/27002 and NIST 800-53).
• Embed Rackspace’s information security policies, standards, and procedures into IT services methodologies.
• Proactively work with the Rackspace Sovereign Services security team to ensure all security components are appropriately integrated into the overall architecture strategy.
• Assist Rackspace Sovereign Services Product team on the appropriate implementation of Rackspace information security policies and standards.
• Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture.
• Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented.
• Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
• Help educate Rackspace Sovereign Services on the requirements within the Rackspace information security governance framework.
• Design and integrate security baseline standards for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.).
• Advise in the development of the security product strategy and roadmaps for the various internal and customer-facing security offerings.
• Join client calls and drive conversations on security controls, policies, and standards.
• Other Incidental tasks related to the job, as necessary.