Cloud Cybersecurity Architect

**Cloud Cybersecurity Architect**

**Job Description:**

We are looking for a Cloud Cybersecurity Architect for a strategic and innovative cloud project. The role includes guiding the project through its lifecycle, from design and architecture to development and implementation, ensuring comprehensive cybersecurity measures. The architect will also be responsible for solution testing and the integration of security components tailored to the project's diverse technological and business requirements.

**Job Requirements:**

- A relevant bachelor's degree – mandatory

- At least 3-5 years of experience in information security – mandatory

- Relevant education and credentials in the field – CCSK / CCSP / AWS Security Certificate / AZ 500 / AZ 305 – advantage

- Experience in accompanying and implementing secure infrastructures and business projects in cloud services (SaaS/IaaS/PaaS) – mandatory, (at least two years)

- Experience in accompanying and guiding cloud computing projects – mandatory, (at least two years)

- Experience working with development infrastructure bodies – specification and writing requirement documents and security guidelines for cloud systems – mandatory, (at least two years)

- Planning and accompanying architecture in security aspects of infrastructure and applications – mandatory, (at least two years)

- Experience with cloud information security components and services such as IAM SCP, Azure Policies, AAD, Security Hub, Defender for Cloud – mandatory (at least two years)

- In-depth familiarity with development infrastructures and processes, DevOps and DevSecOps, CI/CD, GIT, Containers, Serverless, K8S, IAC (Terraform, CloudFormation), API Security – mandatory (at least one year)

- Experience in performing code reviews (Static Code Analysis) and providing secure development guidelines to fix security findings and vulnerabilities – mandatory (at least two years)

- Deep knowledge of identification and authentication mechanisms – OAUTH, SAML, JWT, OIDC, IAM services, IDP – mandatory (at least two years)

- Background and previous experience in financial institutions and processes and familiarity with regulatory directives (e.g., circulars 357, 362, etc.) – significant advantage

- Previous experience in performing penetration tests – advantage

- Familiarity and knowledge of cloud information protection services/products including encryption technologies– DTAAS, KEY VAULT, KMS, HSM - advantage

- Performing risk assessments for cloud services familiarity with standards in cloud environments– SOC 2, CIS, NIST, ISO 27001, ISO 27018, 27017, CSA/CIAQ – advantage

- Experience with cloud communication components/services – VPC, TGW, FW, VPC EP, VNET, WAF – advantage

- Actual development experience in coding languages such as Python, .Net, Java, NodeJS – advantage