Azure Cloud Security

location: atlanta, ga
salary: 0-85hr
as a cloud security architect/consultant, you’ll design and build cloud security solutions that will balance the need for speed and flexibility of cloud infrastructure and iaas/paas/saas applications with the need to protect against ongoing and potential security threats.
job description:

• drive cloud security solutions in both iaas/ paas and saas implementations.
• design & build it projects, steering cloud configurations and services towards industry-leading security with your domain expertise.
• actively assess existing cloud implementations, identifying security issues and prioritizing fixes.
• understand system security vulnerabilities and associated threats, and assess overall security risks to a client cloud environment.
• provide mitigation recommendations to reduce identified security risks.
• work directly with client it staff to establish and enforce it security best practices, protection objectives, process improvements and effective it security controls.
• perform system vulnerability scanning using approved software tools and ability to automate.
• thoroughly understand software installations, systems monitoring and troubleshooting, account management, and overall efforts to minimize system downtime.
• thorough understanding of devops ideologies and ability to drive and communicate change supporting devops/secops methodology within an organization.

• 10 + years’ experience in information security, with focus specifically on cloud security and architecture.
• experience and understanding of cloud platforms (aws, azure).
• familiar with devops and agile methodology.
• knowledge of cloud networking architecture, cloud operations, security, automation and orchestration.
• possess clear understanding of security protocols and standards and have experience with software and security architectures.
• understand how to design and implement security tests in accordance with stated criteria.
• experience understanding protocols, such as, ssl/tls, cifs, http/s, dhcp, smtp, ldap/s, nfs, snmp and dns.
• experience in networking concepts and services, such as, vpns, ipsec, pki and tcp/ip.
• strong written and oral communication skills.
• demonstrate ability to bridge technology knowledge gaps between it staff and corporate staff such as legal, compliance and audit organizations.
• able to work independently or within a team.
• organized, responsive and highly thorough problem solver.

• 5+ years’ experience in cloud security.
• ability to work with minimal direction on a variety of, and sometimes ambiguous, requirement.
• familiar with high-availability (ha) and failover implementations for network infrastructure and server systems.
• monitoring (app insights, operational insights, splunk, azure security center, etc).
• azure ad and identity management in general, along with azure ad sync and role based security (rbac).
• network security best practices around data storage, in addition to the physical elements shown below.
• need solid overall security skills. Desired siteminder, ad azure and ad synch skills needed. Deep general infosec skills in azure. Those would include use of cyberark, keyvault, data encryption, virtual network, network security groups, active directory federation services.