Cloud Security Architect

The Cloud Security Architect will develop security assessment and evaluation plans for existing clients in order to lead and deliver Cloud Risk and Cloud Hygiene Assessments. Based on cloud architecting best practices, this individual will be expected to provide guidance and hands-on experience to teams in design, development, and maintenance of security solutions for cloud. This service will include the design and development of cloud security policies, standards and procedures for various types of public/private/hybrid clouds.

This includes account management, tenant management, Cloud Access Security Broker (CASB) integration, network management, security incident and event management (SIEM), data protection, user account management (SSO, SAML), and password/key management, vulnerability/threat management, etc.

The Cloud Security Architect will lead customer-facing projects and all aspects of the development of security project deliverables including assessment, solution development and, as appropriate, implementation oversight efforts. He or she will effectively and accurately scope customer facing projects as well as identify and positions follow-on work with customer stakeholders that extends the value of BW Cyber as a strategic partner to the client.

The Cloud Security Architect is expected to individually solve problems of higher complexity. The Cloud Security Architect will also participate in the development and enhancement of the information security solutions portfolio to insure it maintains relevancy with customer requirements and industry changes.

• Manage and execute cloud security solutions across lifecycle strategy, design, implementation and operations
• Participate, lead and jointly deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions
• Establish security requirements for cloud-based solutions by evaluating business strategies and requirements; researching cloud infrastructure security standards such as ISO 27000 series, NIST CSF, and CSA
• Provide domain expertise in both public and private cloud and enterprise technology Identify and deliver appropriate controls based on industry standards (e.g. CCM) to drive cloud
• and customer security solutions framework based on business risk and cloud native threats Continually evaluate new threats in the cloud, to identify the impact on IT and Business to
• develop and implement security controls
• Provide recommendations for improvement and risk reduction by assessing clients’ cloud
• security posture; and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients’ existing IT staff as well as 3rd party vendors support our clients (most often managed IT service providers)
• Knowledge and understanding of key differences between most popular cloud provider solutions and cloud orchestration tools (e.g. Azure, AWS, GCP, Pivotal Cloud Foundry, BOSH, Kubernetes, Docker, etc.)
• Strong domain expertise of cloud infrastructure compute, network and storage as well as the cloud control plane
• Knowledge of virtualization, containers, service-mesh and enterprise service business Experience with structured Enterprise Architecture practices, hybrid cloud deployments, and on
• premise-to-cloud migration deployments
• Ability to identify and drive remediation of public and hybrid cloud risks
• Experience in designing, implementing and delivering security for cloud native, distributed
• computing and architectural solutions with a principle of "Secure by Design"
• Expertise in performing Threat Modeling, generating security architectural requirements to
• software…