Azure Cloud Security Architect.

GCS Recruitment; Birmingham; On-site; GBP 90,000 - 120,000; Full time

Job summary

GCS Recruitment in Birmingham is seeking a Principal Cloud Security Architect to lead secure cloud design across Azure, AWS and GCP. The role focuses on designing secure architectures for environments and infrastructure and guiding engineering teams toward the target security state.

You will work hands-on with application developers, articulate security requirements, influence decision makers, and collaborate with multiple disciplines to drive DevSecOps and secure software delivery in cloud

Qualifications

• Must have experience of Cloud security architecture on Azure Deep knowledge of broader Microsoft technology portfolio and solutions
• Cloud security architecture experience on AWS and GCP (preferred)
• Demonstratable experience increasing responsibility architecting, positioning and delivering cloud/internet facing applications
• Ability to provide direction and guidance on architectural use cases and requirements
• Ability to produce hardened configuration standards for cloud services
• Threat modeling experience;
• Preferred experience with one or more general purpose programming languages including but not limited to: PowerShell scripting, Java, C/C++, Python, JavaScript and understanding of software vulnerabilities
• Hands on experience with ARM templates and Terraform
• Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies
• Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity
• Noted cybersecurity expert, keeping technical skills current and participating in multiple forums;

Responsibilities

• Support project teams in designing secure architectures for environments and infrastructure
• Identify and gather project-specific requirements, and embed them into Azure environments and security control design
• Collaborate across within organization to identify, deliver, and document the required artifacts to enable movement of applications and data to the cloud, including strategy, target state, technical roadmaps, position statements, concepts, and logical specifications
• Provide a detailed understanding of cloud security and cloud infrastructure services, threat landscape and attack scenario's, risks
• Be hands-on, directly interacting with the engineering and application development teams, providing leadership to drive security requirements, influence decision makers, build relationships, and communicate strategy and architecture to the broader internal community. You must be able to influence and work collaboratively to guide the developers, engineers and architects towards the desired target state
• Possess significant breadth across other disciplines (e.g., enterprise security architecture, compute services, storage, large-scale networking, virtualization, data center, integration architecture (API), orchestration technologies (Kubernetes, Docker, open stack), systems resiliency, service support, Secure application development lifecycle management (DevSecOps), and service delivery)
• Lead through influence, communicate effectively through clarity of thought and demonstrated understanding of business and technical requirements
• Be a strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business security architects, engineers, developers and senior management

Skills

Cloud security architecture

Azure expertise

AWS & GCP experience

Threat modeling

DevSecOps

Leadership & collaboration

PowerShell

Java

Python

JavaScript

C/C++

Programming languages knowledge

Tools

ARM templates

Terraform

Kubernetes

Docker

OpenStack

Job description

We are currently seeking a Principal Cloud Security Architect.

Key responsibilities:

• Support project teams in designing secure architectures for environments and infrastructure


• Identify and gather project-specific requirements, and embed them into Azure environments and security control design


• Collaborate across within organization to identify, deliver, and document the required artifacts to enable movement of applications and data to the cloud, including strategy, target state, technical roadmaps, position statements, concepts, and logical specifications


• Provide a detailed understanding of cloud security and cloud infrastructure services, threat landscape and attack scenario's, risks


• Be hands-on, directly interacting with the engineering and application development teams, providing leadership to drive security requirements, influence decision makers, build relationships, and communicate strategy and architecture to the broader internal community. You must be able to influence and work collaboratively to guide the developers, engineers and architects towards the desired target state


• Possess significant breadth across other disciplines (e.g., enterprise security architecture, compute services, storage, large-scale networking, virtualization, data center, integration architecture (API), orchestration technologies (Kubernetes, Docker, open stack), systems resiliency, service support, Secure application development lifecycle management (DevSecOps), and service delivery)


• Lead through influence, communicate effectively through clarity of thought and demonstrated understanding of business and technical requirements


• Be a strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business security architects, engineers, developers, application owners, service providers, and senior management

To be successful in this role you should meet the following requirements:

• Must have experience of Cloud security architecture on Azure Deep knowledge of broader Microsoft technology portfolio and solutions


• Cloud security architecture experience on AWS and GCP (preferred)


• Demonstratable experience increasing responsibility architecting, positioning and delivering cloud/internet facing applications


• Ability to provide direction and guidance on architectural use cases and requirements


• Ability to produce hardened configuration standards for cloud services


• Threat modeling experience;


• Preferred experience with one or more general purpose programming languages including but not limited to: PowerShell scripting, Java, C/C++, Python, JavaScript and understanding of software vulnerabilities


• Hands on experience with ARM templates and Terraform


• Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies


• Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity


• Noted cybersecurity expert, keeping technical skills current and participating in multiple forums;