Skywise - Cloud Security Architect

Airbus SE; Southwestern Ontario; On-site; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Health Insurance

Hybrid model

Flexible working hours

Paid leave days

Job summary

Skywise Canada Inc. is seeking a Cloud Security Architect to define, implement, and improve our cloud security strategy across AWS, GCP and Azure.

You will own IAM, key management, posture monitoring, and regulatory compliance to ensure resilient cloud platforms for the Skywise data platform and internal operations. The role partners with the Cyber Security Architect and Skywise Data Platform Operations to deliver secure, scalable infrastructure with a strong security posture and continuous

Qualifications

• 7+ years in cyber security.
• 3+ years in cloud security architecture in a company or SaaS environment.
• Experience securing native cloud platform services (AWS, GCP, Azure).
• Advanced knowledge of cloud security controls definition (segmentation, key management).
• Experience in identity and access management in cloud environments.

Responsibilities

• Design and enforce enterprise cloud security baselines and landing zones.
• Define and implement cloud IAM with least privilege and short-lived credentials.
• Partner with Security Architects to ensure secure deployment of products on cloud platforms.
• Own platform-wide security compliance and global monitoring of cloud systems.
• Act as focal point with Airbus Security Operations Center for Skywise cloud platforms.

Skills

Cloud security architecture

AWS

GCP

Azure

IAM

Security monitoring

Tools

AWS

GCP

Azure

Job description

## Skywise - Cloud Security ArchitectApply: Waterloo: Full time: Posted 6 Days Ago: JR10453632****Job Description:****Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations. **Role Summary:**The Cloud Security Architect is a key member of the Security team playing an important role in the definition, management and improvement of our cloud infrastructure and platform services. This position ensures SKYWISE's robust security position is maintained by defining, implementing and improving our cloud security strategy.In this role, you will serve as the primary partner with the SKYWISE Data Platform Operations by defining the security architecture and tools used within our AWS platform for product landing, and other platforms for the company internal operations. In this frame you will be responsible for the identity and access definition, management and improvement ensuring a strong security posture.Finally this position will define and maintain our cloud security link with Airbus Security Operations Center in order to ensure an efficient monitoring of SKYWISE cloud platforms. **Main Responsibilities:**### **Cloud Infrastructure and Platform Security*** **Design and enforce enterprise cloud security** baselines, landing zones and internal infrastructure perimeters across SKYWISE cloud platforms (e.g. AWS, GCP)* Define and implement cloud native **Identity and Access Management (IAM)**, emphasizing least privilege, short-lived service credentials, and key management infrastructure. Ensure regular reviews are performed and define improvements.* **Partner with the Cyber Security Architect** to ensure our products are deployed onto secure, isolated and compliant platforms.### **Infrastructure governance*** Own SKYWISE **platform level of compliance** to our security standards and certification for cloud security controls.* Define security controls to ensure **global monitoring of our platforms** and build a strong relationship with the SKYWISE Data Platform Operations teams.**Posture Monitoring and Threat Defense*** Identify and manage our Cloud Security Posture tools to detect drift, unauthorized exposures and misconfiguration in real time.* Define and implement the architecture rules to ensure global monitoring of our platforms to detect, manage and recover in case of security breaches.* Be the focal point for the Airbus Security Operations Center with regards to the SKYWISE cloud platforms. **Qualified Experience / Skills / Training:*****Experience & Capabilities:**** 7+ years in cyber security* 3 or more years working experience in a cloud security architecture in a company or SaaS environment.* Experience securing native cloud platform services (AWS, GCP, Azure)* Advanced knowledge of cloud security controls definition (segmentation, key management,...)* Experience in identity and access management in cloud environments. ***Knowledge, Skills, Demonstrated Capabilities & Competencies:*** * AWS certified security or specialty* Certified Cloud Security Professional (CSSP)* Strong cross functional working skills* Ability to identify and communicate on security risks related to cloud platforms.* Pragmatic problem solving and proactive.* A continuous improvement mindset* Knowledge of DevOps practices and concepts **What we Offer:*** Work-Life Balance & Flexibility + Flexible working hours with a hybrid model (3 days per week in our Blagnac office). + 25 annual paid leave days + Collective and individual JRTT (proportional to working time). + A 6th week of paid leave (proportional to working time). + Generous 12-day \"family reason absence package.\" * Family & Health Support + 5 additional full-pay days for maternity, paternity, and adoption leave. + Comprehensive Health Insurance plan. + 3 extra paid annual leave days for employees with RQTH status. * Financial Wellbeing & Savings + Success sharing (intéressement) and profit sharing (participation) schemes. + Monthly seniority bonus for all employees with 3+ years of service. + Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service. + Access to a TSA (Time Saving Account) + Collective and Mandatory Retirement Savings Plans (PERCOL and PERO). * On-site & Other Perks + Several catering options for lunch (canteens, food trucks, bakeries, etc.). + Staff councils (CSE) offer various social, cultural, and sports activities/services. + Navette (shuttle) service. * Training and development opportunities to support your career growthThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.********Company:********Skywise Canada Inc.**Contract Type:**Permanent-----**Experience Level:**Professional**Job Family:**Cyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail] Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.