Cloud Security Solution Architect

Join our forward-thinking fintech organization where we are dedicated to revolutionizing the banking sector.

We leverage cutting-edge technology to provide unparalleled financial services solutions.

Our commitment to innovation and excellence has established us as a leader in the fintech industry.

Responsibilities:

We are seeking a Cloud Cybersecurity Architect. The position involves guiding and leading the project in various cybersecurity aspects, starting from planning and architecture phases, through development stages and implementation.

This includes solution testing, as well as defining and implementing protection components tailored to the project's diverse business and technological needs. The role interfaces extensively within the project framework with development teams, infrastructure teams, architecture, product managers, cybersecurity teams, and various product suppliers integrated into the project.

Requirements:

• Relevant bachelor's degree – mandatory
• Minimum 3-5 years of experience in information security – mandatory (at least 3 years)
• Relevant education and certification in the field – CCSK / CCSP / AWS Security Certificate / AZ 500 / AZ 305 – advantageous
• Experience in guiding and implementing secure infrastructures and cloud projects (SaaS/IaaS/PaaS) – mandatory (at least two years)
• Experience in guiding and leading cloud computing projects – mandatory (at least two years)
• Experience working with development infrastructure bodies – specification and writing security requirements and guidelines for cloud systems – mandatory (at least two years)
• Planning and guiding architecture with security aspects in infrastructure and application topics – mandatory (at least two years)
• Experience with cloud information security components and services such as IAM SCP, Azure Policies, AAD, Security Hub, Defender for Cloud – mandatory (at least two years)
• Deep understanding of development processes and mechanisms, DevOps and DevSecOps, CI/CD, GIT, Containers, Serverless, K8S, IAC (Terraform, CloudFormation), API Security – mandatory (at least one year)
• Experience performing code scans (Static Code Analysis) and providing secure development guidance to address security findings and vulnerabilities – mandatory (at least two years)
• Profound knowledge of identity and authentication processes and mechanisms – OAUTH, SAML, JWT, OIDC, IAM services, IDP – mandatory (at least two years)
• Background and previous experience in financial institutions and familiarity with regulatory directives (e.g., Basel 357, 362, etc.) – significant advantage
• Previous experience conducting penetration tests – advantageous
• Familiarity and knowledge with cloud data protection services/products including encryption technologies – DTAAS, KEY VAULT, KMS, HSM – advantageous
• Conducting risk assessments for cloud services, familiarity with cloud standards and standards – SOC 2, CIS, NIST, ISO 27001, ISO 27018, 27017, CSA/CIAQ – advantageous
• Experience with cloud communication services/components – VPC, TGW, FW, VPC EP, VNET, WAF – advantageous
• Practical development experience in coding languages such as Python, .Net, Java, NodeJS – advantageous
• Team player, capable of working in a team
• Ability to work in an intensive environment and meet deadlines
• High learning capabilities
• Independent, effective time management skills