Senior Technical Lead/ Security Architect

Required skills

• Accountable for translating private cloud implementation into a well-defined blueprint that uses Cloud Security Products to enhance IT security. Understands the vision and enabler to autonomously cater to user needs.
• In-depth knowledge of system design and architecture with the technologies and experience implementing a wide range of solutions
• Delivered hybrid cloud architectures that are secure, resilient, scale and adhere to best-practice procedures. (AWS, Microsoft Azure, GCP)¿
• Deep understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing; Risk Management, RHCOS security, container security, Kubernetes security, IAM security, network security, auditing, encryption, secrets management and data protection, securing CI/CD
• Manage the selection and architecture of cloud security tools and controls, including existing enterprise tools that can extend into the cloud, cloud-native security controls and third-party offerings.¿
• Develop IAM architectures where Identity becomes the new perimeter and moves defenses from static, network-based perimeters to focus on users, assets, and resources. (IGA, IDaaS, PAM, MFA)¿
• Advances knowledge of Identity Security concepts, least-privilege, separation of duties, and Zero trust design principles.
• Experience with IAM Policy 'as code' ; OPA - Open Policy Agent (Styra Enterprise version of OPA); Cedar - Aws opensource policy agent
• Ability to be a technically strong individual with an IT Security background who has demonstrated skill in managing product teams; solid understanding of how IT Security enhances Digital Transformation and identifies new ways of helping bring new business solutions to market while remaining secure
• Leading a team of IAM, network structuring, and enhancing the self-service experience.
• Act as a Thought Leader to stakeholders such as CISOs and executive sponsor with regards to emerging technologies and market trends
• Accountable for customer orientated communications plan, focusing on strategic business value
• Work closely with the project team, CISO to manage and govern security forums with CISOs, NITSOs, CIOs and CTOs

Competencies: Enterprise Architecture¿ Certificate management¿ Cybersecurity Strategy¿ Identity and Access Management¿ Project Management & Planning¿ Zero trust¿ Governance Risk and Compliance¿ Privileged account security¿ Cyber threat management¿ Data governance & security¿ Functional cybersecurity operations¿ Business continuity management¿ DevSecOps practices¿ Vulnerability management¿ Microservices and container security¿ Threat management Hybrid cloud security¿ SIEM & SOAR
Frameworks:

• ISO 27001¿, NIST CSF, NIST SSDF¿, CIS controls¿, OWASP Top 10, SAMM¿, GDPR, SOX type 1 & 2¿, TOGAF ¿

Qualifications:

• Minimum 15 years of qualified experience
• Bachelor's degree in computer science(s), information technology/security, systems engineering or relevant work experience
• Good to have Professional certifications in information technology and cloud security -- CISSP preferred CISM (optional), CCSP (optional), CISA (optional), CEH (optional), OSCP (optional); Architect Certification,