Security Architect - Platform Engineering

• Design, deliver, and maintain the end-to-end target architecture for the security domain.
• Align architecture with the Colt technology landscape in collaboration with architecture, design, and engineering peers.
• Design and advise on security elements for new products and technology introductions, and support compliance and security enforcement projects.
• Help ensure Colt networks comply with relevant regulations, standards, and frameworks, including TSA, DORA, and ISO 27001.
• Monitor emerging technologies and translate research into actionable insights, including research memos and strategy papers for management.
• Work with Colt Business Units on strategic initiatives and support key transformational and wide-scale projects.
• Support product portfolio and product engineering teams with product and services strategy and development.
• Participate in and represent Colt at industry bodies.
• Conduct capability mapping exercises.
• Ensure new implementations and changes across the Colt landscape follow a Secure by Design approach.
• Assist with developing, planning, and delivering hackathons and employee security awareness initiatives, including Security Awareness Week.
• Act as a subject matter expert on security framework architecture and standards for networks, platforms, and security components.
• Work closely with Security Engineering, SOC, Threat Intelligence, Risk, and Colt technology groups to develop, deliver, and validate end-to-end architecture.
• Support security architecture activities, including defining target architecture, initiating or leading transformations and wide-scale deployments, and supporting design and engineering teams.
• Work with vendors and start-ups, engage with customers and the sales organisation, and participate in industry forums and events.

Technologies:

• AI
• Active Directory
• Architect
• Cloud
• IaaS
• Support
• LLM
• Microsoft 365
• Network
• PaaS
• Security
• TCP/IP
• Unix
• Windows
• Office 365

More:

We are Colt, providing network, voice, and data centre services to thousands of businesses worldwide so they can focus on their goals rather than underlying infrastructure. In this Security Architect role, you will join our Security and Resilience - Security Architecture team and contribute to internal architecture and transformation work as well as external engagement. You will be part of a fast-growing global community of experts, with opportunities to learn, develop, inspire, and lead. We empower our people to work together on solutions that connect people, cities, businesses, and ideas. Inclusion and diversity are central to our culture, and we welcome people with diverse backgrounds and experiences. We offer flexible working hours and the option to work from home, an extensive induction with mentors and buddies, development and educational opportunities, a Global Family Leave Policy, an Employee Assistance Program, and internal inclusion and diversity networks.

• At least 3 years of technical knowledge and practical experience in information security in a large-scale enterprise or telecommunications environment.
• At least 5 years of experience and advanced understanding of information security concepts related to private and public cloud providers and services, including IaaS, PaaS, SaaS, their differences, and Microsoft 365 E5 security capabilities.
• Ability to explain technical security concepts in clear business language.
• Experience conducting risk assessments using a recognized risk assessment or management methodology.
• Engineering degree or equivalent in networking, computing, computer science, or a related field; equivalent work experience is also accepted.
• Good understanding of software-defined networking (SDN) and network functions virtualization (NFV) concepts and technologies.
• Understanding of network technologies, including switches, routers, the TCP/IP stack, and protocols such as HTTPS, SNMP, NTP, Telnet, and SSH, as well as security technologies such as firewalls, IDS/IPS, content filtering platforms, proxies, DMZs, anti-malware, anti-spam, anti-ransomware, anti-DDoS, NAC, and MDM.
• Entry-level experience with UNIX and/or MS Windows, including Active Directory.
• Strong teamwork skills and ability to lead small teams of senior architects or engineers and drive projects and activities.
• Strong presentation and interpersonal skills for C-level and customer meetings, vendor management, conference speaking, thought leadership, and participation in standards development and industry forums.
• Creative and analytical abilities, including the ability to produce complex documents and connect related ideas.
• Desirable: Experience in AI and LLM security, guardrails, DLP, and risks such as prompt injection and model poisoning.
• Desirable: Good understanding of Telecoms Security Act requirements and the associated Code of Practice.