Title: Cloud Security Architect-W2
Location: Sterling VA/Silver Spring MD/Atlanta GA (Only Locals)
Only USC/GC with 15years with Media or Entertainment Domain
Job Responsibilities / Typical Day in the Role
- Act as a Cloud Security Subject Matter Expert (SME) for WBDs Infosec department.
- Identify opportunities to reduce cloud security risk for WBD to solution and to lead implementations.
- Create design artifacts to enable members of the Cloud Security team to implement solutions (built in-house or purchased from vendor).
- Partner with product teams to design secure network and serverless architectures.
- Provide strong IAM Policy guidance for least privileged access to product teams.
- Review cloud architecture and AI/ML workflows to advise development teams on strong security design principles and identification of issues prior to deployment of systems or features.
- Interface with Public Cloud providers to improve the security feature set of their products.
- Interface with cloud security vendors to evaluate features and determine proof-of-value.
- Mentor junior members of the team.
- Create and maintain documentation as it relates to cloud security designs/configurations processes standards and recommendations.
- Collaborate with senior management and department leaders to assess near- and long-term cloud security needs.
- Stay current with the latest cloud threat mitigation tools and techniques
Technology requirements:
- Experience with securing/building Azure cloud environments
- Proficient in at least one scripting language (python Nodejs Golang).
- Core understanding of IP Networking routing VPNs.
- Hands-on experience with some the following:
- Security administration in Azure
- Developing & Securing Serverless applications
- Infrastructure as code tools (Terraform CloudFormation Ansible)
- Command Line experience (Bash Powershell AWS-CLI)
- Docker and Kubernetes
- Cloud Network (VPC) engineering
- Cloud native security related tools (Azure Defender for Cloud AWS Guard Duty GCP Security Center WAF)
- GitHub Security
Must Have Skills / Requirements
- Experience Designing and Implementing systems that support multiple users.
- 2 years of experience; Design Implementation and Maintenance of systems used by users.
- The ability to evaluate technical documentation and diagrams for cloud environments and identify security issues in those designs.
- 2 years of experience; Security Architectural Reviews and ability to create design artifacts including infrastructure diagrams.
- Ability to review technical configuration and identify mitigating controls for security related misconfigurations
- 2 years; Experience Managing Exception Requests
Nice to Have Skills / Preferred Requirements
- AWS Certifications AWS Solutions Architect AWS Security Specialty
- GCP Certifications Associate Cloud Engineer Professional Security Engineer
- Security Engineer Certifications CISSP CompTIA Security
- Previous Experience with Wiz Splunk Brinqa integrations with Slack and Jira
Soft Skills
- Strong understanding of cloud-based infrastructure components with a specific understanding of the security risks presented in a decentralized and hybrid environment.
- Broad understanding of information security and compliance risk and how those apply to Public Cloud.
- Comfortable automating processes start to finish and can work closely with cloud solutions engineering and product teams to help integrate security into their existing processes.
- Excellent verbal and written communication skills with a strong attention to detail.
- Remains productive while rapidly switching context.
- Has a thirst for knowledge and is constantly driven to stay current with evolving threat landscapes.
Education / Certifications
- Bachelors degree in computer science Information Security or related field.
- Azure Certifications Azure Fundamentals Solutions Architect