Senior Cloud Security Architect & Infra Lead

ICE Services; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Location-based benefits

Flexible working

Wellbeing initiatives

Training & development

Industry events

Enhanced holiday allowance

Job summary

ICE Services, a music technology company, seeks a Senior Infrastructure and Cloud Security Engineer to bolster cloud security across AWS/Azure and drive secure design across production and corporate environments.

The role focuses on building out the Cloud Security pillar, implementing standards, and advising on security best practices, including Terraform-driven automation and IAM controls.

Qualifications

• Experience in design, documentation, and configuration of secure solutions for AWS and Azure cloud environments.
• Experience in designing configuring tools and technology to work within or alongside cloud environments.
• Experience in designing and configuring third party security technologies within a cloud environment (ie, firewalls, IDS/IPS).
• Experience in design, documentation and configuration of Identity and Access Management solutions.
• Experience in securing cloud container environments.
• Working knowledge of cloud security standards including NIST, CIS, and ISO.
• Performed risk analysis and documented all risks and mitigating controls within cloud environments.
• Understanding of threat models and their application to aid in securing cloud environments.
• Act as a role model, engage with the promotion of a culture of good conduct and contribution to maintaining such a culture.
• Proactivity, transparency and clear accountability for the determination and management of security and risks.
• Fast learner and critical thinker with excellent skills in problem solving and presentation.
• Teamwork with peers and management.
• Exceptional communication skills, both written and oral.

Responsibilities

• Engaging with key stakeholders to understand the current state of cloud security, develop the strategy of integration with all teams ensuring security is considered with all projects.
• Perform gap analysis and identify risks across all cloud environments, drive improvements, document remediation steps, and aid in the reduction of risk
• Design and build secure cloud environments. Working alongside the engineering function this role will assist the team in building an environment that meets the needs to host the applications in a secure manner.
• Assess technologies for use across all systems, identify new tools to evaluate for use, build requirement documentation, criteria for success and preform the proof of concept assessment.
• Configuring the corporate cloud functions and the security of AzureAD using policies and tools, this will include all corporate functions such as email, application connections, and stand alone servers.
• Performing audit and benchmarking across the cloud environments to ensure optimal level of security controls are implemented (such as vulnerability management) and to help drive future initiatives.
• Prepare and enforce standards and guidelines for cloud security, including standard builds, configurations, and automation processes, in particular the use of Terraform.
• Drive particular focus on access controls across the environments and data within the cloud infrastructure.
• Monitor solutions for critical security events and build investigation and incident response plans, including aiding the configuration and use of logging and SIEM tools.
• Offer consultancy as an SME to all business units in relation to technical projects.

Skills

AWS

Azure

Cloud security

Threat modeling

Risk analysis

Vulnerability management

Stakeholder engagement

SIEM

Terraform

AzureAD

Tools

Terraform

AzureAD

SIEM tools

Job description

ICE Services, a music technology company, seeks a Senior Infrastructure and Cloud Security Engineer to bolster cloud security across AWS/Azure and drive secure design across production and corporate environments.

The role focuses on building out the Cloud Security pillar, implementing standards, and advising on security best practices, including Terraform-driven automation and IAM controls.