Position Description
The Global Security (GS) organization of which the Global Security Operation Center (GSOC) is part, is responsible for the protection and defense of CGI members, assets and data. As a member of the GSOC security technology operation team, the Cloud Security Support Specialist will be responsible for daily operations, support, maintenance and monitoring of cloud-based security solutions.
Your future duties and responsibilities
The Cloud Support Specialist is responsible for any or all the following activities:
Operations and Maintenance
- Serve as the Cloud Workload Protection Platform (CWPP) expert, ensuring all cloud-hosted assets, including virtual machines, containers, and clusters, are onboarded, secured, monitored, and properly configured under the CWPP framework.
- Develop onboarding scrips (bash, python, API) to automate deployments to cloud workload protection platform.
- Assist with vulnerability scanning, detection, response, threat hunting and investigation related to our cloud assets.
- Assist with generating compliance and inventory reports (Servers, Cloud Assets, Accounts, Container registries, Kubernetes Clusters) from our Cloud Workload Protection platform.
- Install, configure & maintain the cloud-based security applications using documentation and assistance from vendors support as required.
- Maintain operational documentation required for the support of the solutions.
- Ensure all planned changes are managed using Change Management best practices.
- Ensure compliance with CGI Global Security standards.
Monitoring, Incident Reporting
- Monitoring events and detections and act on findings across all workloads on Azure, AWS and GCP including Kubernetes platform and work with cloud/Kubernetes admins to resolve issues.
- Monitor the cloud-based security platform for indicators of misconfiguration (IOMs)
Troubleshooting and Incident Resolution
- Troubleshoot, determine root cause and provide corrective action in a timely manner for cloud security solution incidents
- Work with cloud/Kubernetes/application SMEs and internal and external service providers to resolve incidents.
- Ensure lessons learned through root cause analysis and troubleshooting are documented.
Collaboration and Continuous Improvement
- Continuously look for opportunities to share knowledge with teammates using oral and written communication skills.
- Help project teams achieve their cost, schedule and quality goals by completing tasks on time and with quality.
Security Technology Evolution
- Provide technical expertise and counsel to project teams when planning modifications to existing or migrations to new security systems and services.
- Ensure all operational impacts are accounted for during complex technology transformations and migrations to mitigate all risks are mitigated.
Required Qualifications To Be Successful In This Role
The candidate should be passionate about cybersecurity, love to solve technical challenges and be on the bleeding edge of technology. This member should also be able to demonstrate a thorough understanding of infrastructure operations and in-depth knowledge and experience around cloud provider solutions (Azure, AWS, GCP) and asset types like virtual machines, clusters (Kubernetes AKS, Amazon EKS, GKE Standard, GKE Autopilot) and registry (ACR, ECR, GAR, GCR). If you are a creative self-starter who uses their knowledge, skills and experience to get things done, then this job is for you!
Education and Certifications
- Degree or equivalent experience in Information Technology, Cybersecurity, Systems/Software Engineering is required.
- Relevant Cloud Certifications from Cloud major providers (AWS. GCP, Azure) are highly desirable, example:
oAZ-500: Microsoft Azure Security Technologies
oSC-200: Microsoft Security Operations Analyst
oSC-900: Microsoft Security, Compliance, and Identity Fundamentals
The ideal candidate should have expertise and strong experience (5+ years) with some of the following areas (but not limited).
Experience / Expertise
- Cloud Infrastructure Support
- Cloud Security
- Microsoft Azure Sentinel Administration
- Security Application Support
- Security Infrastructure Support
- Information Technology, DevOps, SecDevOps
Cloud Security Application Support Experience:
- Cloud Workload Protection Platforms (CWPP (e.g. Wiz, Fugue, Snyk, Crowdstrike, Palo Alto Prisma Cloud).
- Hands-on knowledge of cloud platforms (e.g. Azure, GCP, AWS).
Together, as owners, lets turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, youll reach your full potential because
You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.
Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
Come join our teamone of the largest IT and business consulting services firms in the world.
