Senior Cloud Security Architect

Roles & Responsibilities: Senior Cloud Security Architect

• Contributes to design of the Security Standards, based on organization's Security policy

and IT organization.

• Advises on implementation of security standards and controls for Cloud solutions

(Implementation will be done by DevOps team &/or Infra team).

• Contributes to development of standardized solutions to facilitate the secure access to stacks and the overall cloud environment.
• Identity and Access Management (IAM), Identity Federation / SSO.
• SIEM and Audit Logging (CloudTrail & Config) Threat and Vulnerability Detection & Remediation.
• Management of Security Groups and ACLs, Perimeter security with WAF and Shield.
• DDoS Management of keys for encryption and decryption.
• Data-in-Transit / Certificate Management, Data-at-Rest / Key/Secret Management.
• Leads the design and development of available, cost efficient, fault tolerant, and scalable distributed systems.
• Designs and implements security solutions using AWS best practices and defined security guidelines and industry standards.
• Leads, delivers and supports Cloud Architecture solution, based on defined security standards for CLOUD COE - from an Application and Infrastructure perspective.
• Ensures regular testing and scanning of Cloud products and application customers to provide compliance with overall security standards.
• Ensures Security considerations & processes are met for legacy and full-stack operating models during the migration process.
• Leads and delivers large security initiatives that solve key customer needs.
• Educates team to design and implement secure coding and continuous security practices

within their applications.

• Provides hands-on technical coaching to accelerate Cloud security learning across the

Cloud COE.

• Trains the DevOps and Architects to reduce dependence on the Security Engineer for all

security actions, and increase Security compliance in the build and run of applications

with speed and accuracy.

• Develops a community of Security Champions across the Cloud COE.
• Guides and coaches less experienced peers to become more productive and effective

team members.

Required qualifications: Senior Cloud Security Architect

Experience of working in an Agile/Scrum environment.

Deep understanding of Cloud computing technologies and workload transition challenges.

Knowledge of AWS Well Architected Framework and Cloud migration industry standards

and best practices.

Prior programming background in at least ONE language: C++, Java, Python, Ruby etc.

Technical writing skills for documenting environments and procedures

Experience with most industry compliance and security standards like PCI DSS, SOC-1&2,

ISO 27001, NIST/DoD, SAS70, FISMA, HIPAA, and NIST.

Experience with most continuous security practices, including threat modelling, threat and

vulnerability management, secure coding practices, and automated penetration testing.

Experience with security solutions such as WAF, IPS, and anti-DDOS systems.

Experience with IT compliance and risk management requirements (e.g. security, privacy,

SOX etc.).

Experience with network / perimeter security platforms.

Experience with encryption in-flight and at-rest practices, as well as certificate and secrets

management, security event & incident management (SIEM).

Experience with infrastructure automation, infrastructure as code, automated application.

deployment, monitoring/telemetry, logging, reporting/dashboarding, and continuous delivery

technologies.

Experience with orchestration template technologies.

Experience performing security assessments.

Implementation experience with enterprise security package's identity management and

federation systems.

Competencies: Senior Cloud Security Architect

• Ability to work in an Agile/Scrum environment. Ability to deliver in sprints and work as a

team.

Ability to multi-task and prioritize deadlines.

Ability to operate in cross-functional and multidisciplinary teams.

Customer focused with an attitude to deliver excellent customer outcomes through

technical expertise.

Ability to think strategically about business, product, and technical challenges.

Ability to take ownership with high sense of urgency and work like an entrepreneur.

Problem solving, analytics and resolution skills.

Ability to think outside the box.

Exceptional and effective verbal and written communication skills.

Demonstrated ability to communicate effectively across teams to a broad range of

Audiences.

• Continuously strives to learn new technologies and make time for

self-development.