Skywise - Cloud Security Architect

Airbus; Toulouse; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

25 days annual leave

6th week of paid leave

Family health support

Health insurance

Training & development

Shuttle service

Retirement savings plans

Meal options in canteens

Job summary

Skywise, wholly owned by Airbus, seeks a Cloud Security Architect to define, manage and enhance our cloud security strategy across AWS, GCP and other platforms. You will own IAM design, key management and secure deployment of products on trusted platforms.

You will collaborate with the Security team and Airbus SOC to monitor, improve and enforce security posture, governance and compliance across the SKYWISE cloud landscape.

Qualifications

• 7+ years in cyber security.
• 3+ years working experience in a cloud security architecture in a company or SaaS environment.
• Experience securing native cloud platform services (AWS, GCP, Azure).
• Advanced knowledge of cloud security controls definition (segmentation, key management,...).
• Experience in identity and access management in cloud environments.

Responsibilities

• Design and enforce enterprise cloud security baselines, landing zones and internal infrastructure perimeters across SKYWISE cloud platforms (e.g. AWS, GCP).
• Define and implement cloud native Identity and Access Management (IAM), emphasizing least privilege, short-lived service credentials, and key management infrastructure. Ensure regular reviews are performed and define improvements.
• Partner with the Cyber Security Architect to ensure our products are deployed onto secure, isolated and compliant platforms.
• Own SKYWISE platform level of compliance to our security standards and certification for cloud security controls.
• Define security controls to ensure global monitoring of our platforms and build a strong relationship with the SKYWISE Data Platform Operations teams.
• Identify and manage our Cloud Security Posture tools to detect drift, unauthorized exposures and misconfiguration in real time.
• Define and implement the architecture rules to ensure global monitoring of our platforms to detect, manage and recover in case of security breaches.
• Be the focal point for the Airbus Security Operations Center with regards to the SKYWISE cloud platforms.

Skills

Cyber security

Cloud security

IAM

Security architecture

Cloud platforms

Job description

Job Description:

Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.

Role Summary:

The Cloud Security Architect is a key member of the Security team playing an important role in the definition, management and improvement of our cloud infrastructure and platform services. This position ensures SKYWISE's robust security position is maintained by defining, implementing and improving our cloud security strategy.

In this role, you will serve as the primary partner with the SKYWISE Data Platform Operations by defining the security architecture and tools used within our AWS platform for product landing, and other platforms for the company internal operations. In this frame you will be responsible for the identity and access definition, management and improvement ensuring a strong security posture.

Finally this position will define and maintain our cloud security link with Airbus Security Operations Center in order to ensure an efficient monitoring of SKYWISE cloud platforms.

Main Responsibilities:

Cloud Infrastructure and Platform Security

• Design and enforce enterprise cloud security baselines, landing zones and internal infrastructure perimeters across SKYWISE cloud platforms (e.g. AWS, GCP)
• Define and implement cloud native Identity and Access Management (IAM) , emphasizing least privilege, short-lived service credentials, and key management infrastructure. Ensure regular reviews are performed and define improvements.
• Partner with the Cyber Security Architect to ensure our products are deployed onto secure, isolated and compliant platforms.

Infrastructure governance

• Own SKYWISE platform level of compliance to our security standards and certification for cloud security controls.
• Define security controls to ensure global monitoring of our platforms and build a strong relationship with the SKYWISE Data Platform Operations teams.

Posture Monitoring and Threat Defense

• Identify and manage our Cloud Security Posture tools to detect drift, unauthorized exposures and misconfiguration in real time.
• Define and implement the architecture rules to ensure global monitoring of our platforms to detect, manage and recover in case of security breaches.
• Be the focal point for the Airbus Security Operations Center with regards to the SKYWISE cloud platforms.

Qualified Experience / Skills / Training:

Experience & Capabilities:

• 7+ years in cyber security
• 3 or more years working experience in a cloud security architecture in a company or SaaS environment.
• Experience securing native cloud platform services (AWS, GCP, Azure)
• Advanced knowledge of cloud security controls definition (segmentation, key management,...)
• Experience in identity and access management in cloud environments.

Knowledge, Skills, Demonstrated Capabilities & Competencies:

• AWS certified security or specialty
• Certified Cloud Security Professional (CSSP)
• Strong cross functional working skills
• Ability to identify and communicate on security risks related to cloud platforms.
• Pragmatic problem solving and proactive.
• A continuous improvement mindset
• Knowledge of DevOps practices and concepts

What we Offer:

• Work-Life Balance & Flexibility Flexible working hours with a hybrid model (3 days per week in our Blagnac office).
• 25 annual paid leave days + Collective and individual JRTT (proportional to working time).
• A 6th week of paid leave (proportional to working time).
• Generous 12-day "family reason absence package."
• Family & Health Support 5 additional full-pay days for maternity, paternity, and adoption leave.
• Comprehensive Health Insurance plan.
• 3 extra paid annual leave days for employees with RQTH status.
• Financial Wellbeing & Savings Success sharing (intéressement) and profit sharing (participation) schemes.
• Monthly seniority bonus for all employees with 3+ years of service.
• Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service.
• Access to a TSA (Time Saving Account)
• Collective and Mandatory Retirement Savings Plans (PERCOL and PERO).
• On-site & Other Perks Several catering options for lunch (canteens, food trucks, bakeries, etc.).
• Staff councils (CSE) offer various social, cultural, and sports activities/services.
• Navette (shuttle) service.
• Training and development opportunities to support your career growth

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.

Company:

• Skywise

Contract Type:

• Permanent -----

Classe Emploi (France):

• Classe G14

Experience Leve