Senior Cloud & System Security Architect

SES; McLean (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

SES seeks a Senior Engineer, Cloud and System Security to translate complex security requirements into practical concepts and lead cross-functional teams in delivering resilient security solutions across cloud, systems, and applications.

You will design architectures in line with standards, automate controls, and guide BizDevOps teams through risk-based decisions while ensuring governance and compliance across hybrid environments.

Qualifications

• Degree in Computer Science and a minimum of 10 years industry related experience in large heterogeneous environments.
• Knowledge of MS Azure, Office 365, Azure Information Protection, Security Center, Cloud App Security, Microsoft Defender for O365, Defender for Identities, Intune, Conditional Access, Identity Protection, Application Gateway, Security and Compliance,
• Azure DevOps
• Operating Systems (MS Windows 10, Windows Server 201x and Linux), Citrix, VMWare, VDI, WVD, containers and applications, including a clear understanding of their vulnerabilities and how to securely design and implement them
• Automation using common scripting languages and interfaces including Powershell, Python, Terraform, JSON, SOAP, RestAPI, etc
• Identity and Access Management and Strong Authentication Systems, including Azure AD, Active Directory, Kerberos, SSO, SAML, OAuth
• MITRE ATT&CK framework for Enterprise and Cloud, attacker techniques and how to mitigate them in complex environments
• Public Key Infrastructure including HSM (e.g., Public Certificate Management, Internal Certificate Management, ...)
• Privileged Access Management and password vault solutions
• Malware protection, Enterprise Detection and Response and Host-based Intrusion Prevention Systems
• Security standards, best practices and guidelines (e.g., NIST SP-800 series, DISA STIGs, CIS)
• Vulnerability, compliance and patch management solutions for complex, heterogeneous systems
• Relevant product and general security certifications (e.g., Microsoft Azure, O365, CompTIA Cloud, GCWN, GCED, GCUX, GISP, GPEN, CISSP, CEH) and knowledge of the satellite industry are a plus
• Solid knowledge of cyber security threats, vulnerabilities, security technologies, controls and best practices

Responsibilities

• Translate advanced security requirements, threats, vulnerabilities and security risks in complex environments into comprehensive technical security concepts
• Lead and advise architects and BizDevOps teams on cyber security strategies, architectures and controls to meet requirements
• Design and document system and application security architectures in line with industry and governmental standards
• Autonomously lead complex cyber security implementation projects
• Design, implement and automate cloud, system and application security controls including EDR, O365 Security, data loss prevention
• Define policies, processes, configuration standards and guidelines for security risk management
• Perform technical security assessments and audits to identify vulnerabilities and recommend mitigations
• Evaluate emerging risks and implement effective risk mitigations
• Support security incident response with preventive controls and containment/recovery

Skills

Cloud security

Security architecture

Threat modeling

IAM / PAM

Security controls

Policy governance

Scripting (PowerShell)

Terraform

OAuth/SAML

MITRE ATT&CK

Vulnerability mgmt

Windows/Linux

Azure AD

Container security

EDR tools

Education

Degree in Computer Science

Tools

Azure DevOps

VMware

Active Directory

PowerShell

Terraform

Job description

SES seeks a Senior Engineer, Cloud and System Security to translate complex security requirements into practical concepts and lead cross-functional teams in delivering resilient security solutions across cloud, systems, and applications.

You will design architectures in line with standards, automate controls, and guide BizDevOps teams through risk-based decisions while ensuring governance and compliance across hybrid environments.