Senior Security Architect to help assess and design the current Kubernetes and GCP services for[...]

S I Systems; Toronto; Hybrid; CAD 100,000 - 140,000; Full time

Job summary

An established industry player is seeking a Senior Security Architect to enhance security controls in a modern cloud environment. This role involves assessing and designing Kubernetes and GCP services for a major banking client, ensuring secure application infrastructure while collaborating with various teams. The ideal candidate will possess extensive experience in security architecture, particularly within GCP, and will be instrumental in leading integrations and migrations. Join a dynamic team that values innovation and security in the rapidly evolving cloud landscape, where your expertise will drive significant impact.

Qualifications

• 10+ years of IT experience with a focus on security architecture.
• Strong hands-on experience with GCP and Kubernetes.

Responsibilities

• Develop security controls and principles for GCP Kubernetes environment.
• Collaborate with teams to integrate security during design and development.

Skills

IT Experience

Security Architecture

Software Security Controls

GCP

Kubernetes

CI/CD Pipelines

Networking

Storage in GCP

Education

Bachelor's Degree in Related Field

CISSP or Similar Security Certifications

Tools

GCP

Kubernetes

JIRA

Service Now

Job description

Senior Security Architect to help assess and design the current Kubernetes and GCP services for security controls with a major banking client- 37453

Senior Security Architect to help assess and design the current Kubernetes and GCP services for security controls with a major banking client- 37453

Location: Hybrid – 2 days/week (likely Tuesdays/Thursdays)

Contract Duration: 4 months, possibility of extension or conversion to FTE

Story Behind the Need

• Business group: Cloud & Application Security Product and Architecture - team is a product group within Cloud and Applications Security. This team focuses mainly on strategy building.
• Project: Part of CAP (Cloud Acceleration Program) - Assess and design the current Kubernetes and GCP services for Security Controls to meet regulatory requirements

Typical Day in Role:

• Contribute to ensuring secure modern application infrastructure in cloud by developing security controls and principles in a GCP Kubernetes environment
• Network security in cloud is one of the crucial security domains, with a highly specialized experience required, and forms a fundamental building block in the entire cloud architecture.
• Collaborate with cloud infrastructure, DevOps and development teams to integrate security during the design and development phases.
• Provide mentorship and training to other team members on cloud security principles.
• Help develop test cases and drive Proof of Value (POV) to completion.
• Contribute to system architecture.
• Establishing seamless integration between cloud and on-prem
• Form a connection when talking about the security tools for platform integration into cloud

Must Have Skills

• 10+ years’ relevant progressive experience in IT
• 3+ years' experience in Security Architecture/Integration/Implementation roles
• 4+ years’ experience with Software Security Controls Architecting and Solutioning
• 3+ years’ experience with GCP
• 2+ years’ experience with Kubernetes

Nice-To-Have Skills

• Recent experience with and understanding of some of the following: CI/CD pipelines, networking, storage in GCP
• Experience with deployment and managing IaaS, PaaS & SaaS solutions

Degrees or certifications:

• Bachelor's degree in a related field required, professional experience is a priority

• CISSP or similar security certifications are an asset

Best vs Average:

Ideal candidate has strong security architecture experience in a modern GCP cloud environment, with hands on deployment experience

Project: migration from SCA tool - to another vendor to the Cloud -on-prem to Cloud; a lot of integration work needed, SSO, LAM/WAM, JIRA integrations, Service Now - log monitoring, pipeline integration, artifact integration; working with MAST, APA, security engine, ESLM/SIEM; expectation is the Architect should be able to lead these integrations and migrations and have experience/understanding with all of these and hit the ground running with minimal training time

feedback: candidates should be able to form a connection when talking about the security tools for platform integration into cloud

Candidate Interview Format:

In person interview - will be at 44 King West on Tuesdays or Thursdays

- 1 Interview - 1 hour - panel technical and behavioral interview – technical scenario-based questions, will be solutioning live on paper/whiteboard – with Director and Architect