Enterprise Security Architect

Posted:
7/15/2024, 6:54:06 AM

Location(s):
Erskine, Oregon, United States ⋅ Newcastle upon Tyne, England, United Kingdom ⋅ England, United Kingdom ⋅ Oregon, United States

Experience Level(s):
Senior

Field(s):
IT & Security

Job Description:

At DXC Technology, delivering excellence for our customers and colleagues is more than just a motto, it’s something we strive towards constantly through our work. Every day we deliver mission critical services in a secure environment whilst promoting our people first agenda, a real sense of community and a healthy work-life balance. Our consistently positive customer feedback and continuous growth helps us cement our place as one of the world’s leading IT solutions enterprises, helping us deliver services and solutions in both challenging and exciting situations.

We currently have a requirement for a Security Architect. Suitable candidates for this role must hold MOD SC clearance currently and be able to travel to either our Erskine or Newcastle sites. You will be required to attend the site on a regular basis.

Role

Providing security architecture frameworks and guidance to project teams and SMEs during design and implementation phases and reviewing updates, new designs and supporting incident investigation in compliance with the client's architectural framework.

Architect solutions and technically lead their implementation in accordance with the client agreed architectural framework.

Work closely with the customer’s architecture team to develop solutions

Technically lead security projects, ensuring that the customer’s security requirements are met and visibly mapped within the architectural framework.

Provide assistance and support on architectural/technical issues to other team members as required, whilst sharing technical knowledge and experiences.

Gain and maintain a working knowledge of the DXC Portfolio of Security Products and Services, promoting this with the customer and encouraging best fit solutions.

Continually review and enhance existing knowledge of the security controls and monitoring aspects of common product sets and technologies.

Provide ‘soft’ consultancy skills and a proactive approach to gain absolute customer trust.

Support consultancy team personnel and providing mentoring support and guidance to team members to help grow skills and capabilities.

Experience

Excellent Enterprise/Cloud Security Architecture experience and at least 10 Enterprise and/or 5 years Cloud experience

Experience working with in MoD and HMG as a client to capture requirements and formulate solutions.

Effective analytical, planning, and problem-solving skills, including within Agile delivery programmes.

Strong interpersonal skills.

Developing and implementing Enterprise Security Strategy.

Defining and implementing security architectural solutions within a range of common architectural frameworks, such as TOGAF.

Interpreting and applying appropriate standards, policies, and legislation, e.g., PCI DSS, COBIT, SOX, DPA, HMG SPF, JSP 440, CESG IA Portfolio, ISO27001, NIST Cyber Security Framework etc.

Designing and implementing security solutions through to operation in multi-supplier/multi-platform environments.

Delivering security architectures/strategies as part of a broader enterprise or IS/IT architecture

Ability to interpret and apply appropriate standards, policies, and legislation, e.g., PCI DSS, COBIT, SOX, DPA, HMG SPF, JSP 440, CESG IA Portfolio, ISO27001, NIST Cyber Security Framework etc.

Understanding of threat and risk analysis methodologies/techniques and the interpretation/application of their output in the definition of security architectures.

Experience with cloud development and security requirements capture, definition and instantiation within chosen solutions.

Ability to work in a high-pressure team environment.

Self-motivation and resilience, even when under pressure.

A well planned and resourceful approach to working, being able to prioritise tasks effectively.

An understanding of the importance of total customer care, including expectation management.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.