Cloud Security Architect

Описание

Description & RequirementsWho we are looking forSecurity Architect (Cloud), you will become an essential and vital part of our Cyber Risk team, providing expert advice in both local and international cloud security projects where a diverse skillset, relevant knowledge on both IT and business aspects set us apart from the competition. As part of our Cyber Practice, you will be part of a team of seasoned cyber security professionals where inclusive leadership, continuous learning and coaching culture is considered an essential part of who we are.As part of your role, together with Senior Leadership, you will be in charge of developing and refining Deloitte's Cloud Security offering and go to market; as well as build the Cloud Security practice within Ukraine and central Europe.Let's talk about you:Between 7 - 15 years of Cyber security experience, ideally most of it within consulting within the following areas:Cloud and Container Security:Minimum of 5 years experience with AWS, Azure, GCP or OCI and demonstrable affinity with Cloud technologyKnowledge of information security principles and guidelines (including CIS, MITRE ATT&CK frameworks)Strong working knowledge of IT risks, cybersecurity, computer operating systems, and cloud computing environmentsExperience with containerization: Kubernetes, Docker. Practical experience with serverless and secure development environments, infrastructure-as-code is a plusGovernance and Risk Assessment :Good knowledge of security frameworks such as ISO, NIST CSF, CSA and CIS controlsExperience with the implementation of cloud risk frameworks and optimization of controls in CI/CD pipelinesArchitecture and Design:Well-versed in Secure Cloud Architecture Design and Implementation; Able to design solutions for improving Cloud Security by enforcement of cloud security guardrails and standardsExperience with architecture and security reviews, threat modeling applications, and identifying areas of riskExperience with encryption in-flight and at-rest practices, as well as certificate and secrets is a nice to haveHigh level knowledge of network architectures, topologies, and concepts (Firewalls, LB, WAF, CDN, VPC, ACL, TLS, SSH, and DNS)Experience implementing strategies to support secure and compliant architecturesSoft skills:Adaptable, flexible and able to see the bigger pictureComfortable or eager to be involved in business development initiatives, should be at ease being on the market and engaging with potential new clients or increasing our offering with existing clientsA thought-leader with a strong drive and motivation to build a teamAbility to work within international environmentCertifications such as CISSP, CISA, or CISM are highly desiredYour future roleSupporting clients during their cloud transformation initiatives, making sure that all technical security risks are correctly identified, mitigated and reported. In addition, integrating the new cloud infrastructure in the overarching security architecture and strategyPlan, research, and design security controls for IT systems and data to align with business objectivesDeveloping technical security standards to serve as input for the creation of the cloud landing zonesDefining, establishing and maintaining multi-cloud security architectures, strategies and methodologiesLeading the implementation of technological cloud security capabilities by defining the technological security vision, defining the solutions and steering the implementation teams in realizing these architecturesReview system security measures and implement necessary enhancementsDefining and reviewing cloud security architectures and strategic roadmaps on an ongoing basis to ensure alignment with both business and IT strategies, taking into account technology evolutionsGiving input to the ongoing improvement and streamlining of security architecture development and deliveryDelivering an integrated security architecture model linking cloud, applications, information and infrastructure architectures