Security Solution Architect (RS Security Div)
rakuten · Tokyo, Japan ·
- Category
- Architecture
- Experience
- 5+ years
- Company size
- 1000+
rakuten · Tokyo, Japan ·
Job Description:
About Organization
Rakuten Symphony is at the forefront of revolutionizing the telecommunications industry, building the future of mobile networks with our innovative, cloud-native, and Open RAN solutions. Our mission is to empower operators globally to deliver cutting-edge services efficiently and at scale.
We are seeking a highly technical and client-facing Security Solution Architect to lead the security strategy for our RAN, OSS, and cloud-native software deployments. You will act as the bridge between our engineering team and our Telco/Enterprise customers, ensuring our products are securely integrated into their complex, high-availability environments. You will be responsible for the entire security lifecycle: from architecting solutions during pre-sales to hands-on implementation and hardening at the customer site.
Job Duties
Pre-Sales & Advisory: Partner with Sales and Solution Architects to design secure, compliant, and performant architectures. Lead security discussions with customer CISOs, focusing on IAM and robust network perimeter strategies.
Architectural Design: Develop and document security integration patterns (e.g., Cisco ASA, F5/NGINX application security, IAM federation, and Zero Trust models) tailored for 5G/RAN and OSS/BSS environments.
Identity & Access Governance: Design and implement centralized identity management solutions, integrating with customer LDAP, Active Directory, or Cloud-based IdPs (Okta, Azure AD) using SAML 2.0, OIDC, and OAuth 2.0.
On-site Implementation: Execute security configurations during deployment, including network security policies, F5 WAF policies, Kubernetes RBAC/ABAC enforcement, container hardening, and security validation testing.
Customer Trust & Assurance: Create and maintain customer-facing security documentation, including whitepapers, responsibility matrices, and compliance mapping (ISO 27001, SOC 2, 3GPP standards).
Minimum Qualifications
Network & Application Security: 5+ years of experience in network/cloud security with expert-level proficiency in enterprise-grade network security products.
Identity & Access Management (IAM): Deep understanding of Identity Federation, Privileged Access Management (PAM), and MFA. Proven experience integrating enterprise-grade IAM into SaaS or high-availability software.
Cloud-Native Proficiency: Deep understanding of Kubernetes security (Network Policies, RBAC, Service Mesh/mTLS) and cloud security (AWS/Azure/GCP).
Telecom Domain Knowledge: Familiarity with telecom-grade infrastructure (RAN, OSS/BSS) and the unique security challenges of high-throughput, low-latency environments.
Communication Skills: Proven track record in a customer-facing role. Ability to explain complex security risks to non-technical stakeholders and negotiate technical requirements with engineering teams.
Hands-on Capability: Comfortable working in production environments, performing CLI-based configurations, and troubleshooting connectivity/authentication issues under pressure.
Preferred Qualifications
Certifications: Cisco (CCNP/CCIE Security), F5 (Certified Technology Specialist/Solution Expert), CISSP, CISM, or cloud-specific security certifications.
Compliance Experience: Experience navigating audits (ISO 27001, SOC 2, PCI DSS) or responding to detailed security questionnaires from large enterprises/Telcos.
Automation: Experience with Infrastructure-as-Code (Terraform, Ansible) to automate policy deployment and security hardening.
Languages:
English (Overall - 3 - Advanced)