Security architect

Job description

• Design cloud security architectures and perform architecture design reviews
• PCI DSS subject matter expert ensuring company’s security architecture is fully PCI compliant
• Define, prioritize, and measure our efforts in achieving and maintaining public and private   cloud security in environments such as AWS working with engineering teams
• Implement, maintain, and improve existing industry best practices of operational security controls such as:

-Audit mechanisms

-Vulnerability management

-Data classification

-Encryption and data security

• Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls
• Ensure effective coordination between IT Security, Private Cloud, and Infrastructure through collaboration with engineers

Job Requirements

• Strong foundations in software engineering, specifically at the architectural level
• Strong foundations in public cloud (Amazon Web Services, Google Cloud Platform, Microsoft Azure)
• Strong foundations in Kubernetes or Kubernetes like environments (stateless services, auto scaling, pod communication)
• Knowledge of Infrastructure-as-Code and concepts related to automated infrastructure management using tools such as Terraform
• Knowledge of cloud security best practices including Identity Access Management (IAM), network security, modern cloud security architecture, and platform specific security and governance tools
• Knowledge with CSPM platform like Wiz Orca etc
• Knowledge in Service Mesh Architecture
• Understanding of the ISO 27001/27002, COBIT, and ITIL frameworks are required.