Cloud Security Architect

Job/Responsibility Profile

1. OS Automation, OS Scripting, Patching Automation (Linux and Windows servers) in the cloud at scale.
2. Configure and manage cloud security tools such as encryption, identity and access management, logging, and auditing.
3. Analyze and investigate security alerts and incidents using SIEM/SOAR platforms, investigate and provide timely response and resolution.
4. Identify and remediate cloud misconfigurations and compliance issues using automation and scripting.
5. Develop and update cloud security policies, standards, and guidelines based on Industry standards.
6. Participate in incident response activities, including investigations, root cause analysis, and remediation efforts.
7. Monitor cloud environments for security breaches, unauthorized access, and other security incidents, and respond promptly to mitigate risks.
8. Support cloud customers through cloud-native architecture guidance, security architecture guidance, policy remediations, etc.
9. Work with ITSM functions (Change management, Incident management, Problem management, Request management) as they apply to tools and platforms used by the team.

Technical Skills/Experience:

1. Experience with AWS & Azure - Hands-on experience architecting & administering with at least one and working knowledge of the other. (GCP knowledge/exposure is a plus)
2. Strong knowledge of cloud security concepts, principles, and best practices.
3. Good understanding of OS fundamentals (Windows or Linux) and OS security principles.
4. Experience in cloud security - in AWS or Azure (GCP experience is a plus).
5. Experience working with IaC tools such as Terraform, CloudFormation, or ARM templates.
6. Hands-on experience with Linux and Windows patching and hardening.
7. Hands-on experience with SIEM/SOAR technologies.
8. Experience with analyzing security logs such as Cloud Trail, VPC Flow Logs, S3 Access Logs, Azure Activity Logs, NSG Flow Logs, Storage account logs.
9. Hands-on experience with cloud security tools such as AWS Security Hub, Azure Security Center, or GCP Security Command Center.
10. Proficient in scripting languages such as Python or Bash.
11. General experience working within ITSM processes (Change, Incident, Problem, Request management) in an Enterprise context.
12. Certifications such as AWS Certified Security Specialty, Azure Security Engineer Associate, or GCP Professional Cloud Security Engineer are a plus.