Position Details: Engagement Manager - Cloud Security
Description:
As a Cloud Security Architect, you will be responsible for defining
the cloud security framework and architecture, ensuring it meets the
business requirements and performance goals. Further assist in the
identification, analysis, evaluation, life-cycle management, and
adoption of security technologies in Cloud environments that support
business requirements and align with architecture standards and
patterns.
- Architect, design, prioritize, coordinate, and communicate the
security technologies necessary to ensure a highly secure yet usable
computing environment in the Cloud.
- Provide strategic thought leadership, architecture expertise
(SABSA, NIST, Zero Trust, Cloud Security Architecture) and build
roadmaps to achieve target architecture.
- Formalize (e.g. in the form of reference architectures, guardrails,
single point lessons, etc.) relevant information security principles
and requirements that govern how to securely provision and protect Cloud
access and usage across all dimensions of the customer business for all
infrastructure and services
- Establish and document technical requirements from the business
requirements, create enterprise level security architecture and design
- Architecture assessment and review of solution architecture documentation, high-level and detailed design documentation
- Promote and support the embedding of security best practice in architecture development processes to improve standardization
- Design security controls to protect cloud-based applications, data, and infrastructure.
- Conduct or facilitate threat modelling of services and applications
that tie to the risk, data and industry drivers associated with the
service or application
- Define/Develop and document the target reference security
architecture (including high level capabilities/services) across hybrid
IT (Multi-cloud, On-Premises, Industry) as target architecture.
- Develop and document architecture patterns and blueprints to uplift
the coverage of the Security Controls and Capabilities in accordance
with the target state architecture.
- Develop and document Technology Security Strategy and actionable Roadmap
- Provide guidance on architecture cloud security requirements in product selections / RFP
- Work closely with external vendors to bring new ideas / technologies into the business.
Qualifications:
- 15+ years of relevant experience
- Experience in Cloud Security architect role designing, reviewing, and supporting public clouds Azure, AWS and GCP.
- Stays current with leading and emerging security technologies and makes recommendations for use based on business value.
- A strong understanding of cloud computing technologies, including
Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and
Software as a Service (SaaS).
- Extensive knowledge and experience with developing Cloud Security
Frameworks using industry best practices such as those from the Cloud
Security Alliance (CSA) and NIST CSF and regulatory requirements such as
HIPAA, HITrust and PCI or closely related.
- Demonstrated capability to design, deploy, operationalize, and
automate secure and highly scalable enterprise systems on public cloud –
AWS, Azure and Google.
- BA or BS or equivalent in IT related degrees
- Certification like CISSP or CCSK, CCSP and Azure or AWS or GCP
security Architect or professional certification are highly desirable
#LI-AK1