Security Solution Architect (RS Security Div)

Job description

Job Description: About Organization Rakuten Symphony is at the forefront of revolutionizing the telecommunications industry, building the future of mobile networks with our innovative, cloud-native, and Open RAN solutions. Our mission is to empower operators globally to deliver cutting-edge services efficiently and at scale. We are seeking a highly technical and client-facing Security Solution Architect to lead the security strategy for our RAN, OSS, and cloud-native software deployments. You will act as the bridge between our engineering team and our Telco/Enterprise customers, ensuring our products are securely integrated into their complex, high-availability environments. You will be responsible for the entire security lifecycle: from architecting solutions during pre-sales to hands-on implementation and hardening at the customer site. Job Duties Pre-Sales & Advisory: Partner with Sales and Solution Architects to design secure, compliant, and performant architectures. Lead security discussions with customer CISOs, focusing on IAM and robust network perimeter strategies. Architectural Design: Develop and document security integration patterns (e.g., Cisco ASA, F5/NGINX application security, IAM federation, and Zero Trust models) tailored for 5G/RAN and OSS/BSS environments. Identity & Access Governance: Design and implement centralized identity management solutions, integrating with customer LDAP, Active Directory, or Cloud-based IdPs (Okta, Azure AD) using SAML 2.0, OIDC, and OAuth 2.0. On-site Implementation: Execute security configurations during deployment, including network security policies, F5 WAF policies, Kubernetes RBAC/ABAC enforcement, container hardening, and security validation testing. Customer Trust & Assurance: Create and maintain customer-facing security documentation, including whitepapers, responsibility matrices, and compliance mapping (ISO 27001, SOC 2, 3GPP standards). Minimum Qualifications Network & Application Security: 5+ years of experience in network/cloud security with expert-level proficiency in enterprise-grade network security products. Identity & Access Management (IAM): Deep understanding of Identity Federation, Privileged Access Management (PAM), and MFA. Proven experience integrating enterprise-grade IAM into SaaS or high-availability software. Cloud-Native Proficiency: Deep understanding of Kubernetes security (Network Policies, RBAC, Service Mesh/mTLS) and cloud security (AWS/Azure/GCP). Telecom Domain Knowledge: Familiarity with telecom-grade infrastructure (RAN, OSS/BSS) and the unique security challenges of high-throughput, low-latency environments. Communication Skills: Proven track record in a customer-facing role. Ability to explain complex security risks to non-technical stakeholders and negotiate technical requirements with engineering teams. Hands-on Capability: Comfortable working in production environments, performing CLI-based configurations, and troubleshooting connectivity/authentication issues under pressure. Preferred Qualifications Certifications: Cisco (CCNP/CCIE Security), F5 (Certified Technology Specialist/Solution Expert), CISSP, CISM, or cloud-specific security certifications. Compliance Experience: Experience navigating audits (ISO 27001, SOC 2, PCI DSS) or responding to detailed security questionnaires from large enterprises/Telcos. Automation: Experience with Infrastructure-as-Code (Terraform, Ansible) to automate policy deployment and security hardening. Languages: English (Overall - 3 - Advanced)