Security Architect for Network and Cloud

Baker McKenzie; Belfast City District; On-site; GBP 85,000 - 110,000; Full time

Job summary

Baker McKenzie is seeking a Security Architect for Network and Cloud to lead the design and development of cloud network security solutions in a Belfast-based role. The candidate will oversee cloud security tooling, CNAPP and CASB implementations, and email security architecture in a hybrid environment.

Required are extensive cloud security design experience, strong Microsoft Defender for Cloud Apps/Cloud expertise, and a solid background in IAM and data classification with Purview.

Qualifications

• Bachelor’s degree or equivalent professional experience in computer science or related field.
• Extensive experience designing and implementing enterprise cloud security solutions.
• Experience with Microsoft cloud security tools, Defender for Cloud Apps & Defender for Cloud.
• Experience with Purview data classification for DLP via CASB.
• Extensive email security architecture experience in hybrid environments.
• Experience deploying enterprise CASB and CNAPP solutions.

Responsibilities

• Design and implement cloud-native security architectures and solutions.
• Develop CASB strategies to protect cloud services and apps.
• Create and maintain cloud security policies, standards and best practices.
• Conduct security assessments and audits of cloud infra and apps.
• Document cloud network security solutions.
• Advise on email security architecture with security-focused collaboration.
• Monitor email threat landscape and counter threats with secure solutions.

Skills

Cloud security design

CASB

CNAPP

Email security architectures

Security policy development

IAM

Network security in cloud

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Microsoft Purview

Microsoft Entra ID

Education

Bachelor’s degree in Computer Science

Tools

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Microsoft Purview

CASB

CNAPP

Microsoft Entra ID

Job description

The Security Architect for Network and Cloud will lead the design and development of the Firm's cloud network security solutions. The role-holder will oversee the operation and configuration of the Firm's cloud security toolsets. This will include the design and management of CNAPP (cloud-native application protection platform) and CASB (cloud access security broker) technologies.

Main responsibilities:

• Design and implement cloud-native security architectures and solutions
• Design and implement CASB strategies to protect the Firm’s cloud services and applications
• Develop and maintain security policies, standards, and best practices for cloud environments
• Conduct security assessments and audits of cloud infrastructure and applications
• Create and maintain solution documentation for cloud network security
• Serve in an advisory, consultative, and oversight capacity for the Firm’s email security architecture, processes, and platforms, partnering with Technology Infrastructure to produce highly secure and resilient solutions that enable the business
• Monitor the email threat landscape, maintain expertise on compensating security platforms and technologies, and deliver proposals and solutions that counter existing and anticipated threats

Skills and experience:

• A Computer Science bachelor’s degree or equivalent professional experience
• Extensive experience in designing and implementing enterprise cloud security solutions
• Extensive working experience with Microsoft cloud security tools, including Microsoft Defender for Cloud Apps and Microsoft Defender for Cloud
• Experience of Microsoft purview data classification & labelling for DLP policy enforcement via CASB
• Extensive working experience in email security solutions with secure email architecture design in a hybrid environment
• Experience in deploying enterprise CASB and CNAPP solutions
• Experience configuring and troubleshooting network security, including security groups, network ACLs and load balancers in cloud environments
• Strong knowledge of IAM solutions with desired experience in Microsoft Entra ID
• Strong application and network security risk assessment skills to identify gaps in security configuration and design
• Expert-level problem-solving and analytical skills
• Strong written and oral English communication skills, and ability to convey complex concepts to non-technical constituents
• Strong Knowledge and understanding of network security frameworks and compliance standards

Reports to:

Director, Global Security Engineering

Travel requirements:

Ad hoc travel will be required