Senior IT security advisor protecting IT systems and advising on strategic projects at Desjardins. Leading initiatives and representing the unit in senior management committees.
About the role
- Senior Advanced Cloud Security Architect overseeing cloud security posture at Honeywell Connected Enterprise. Driving security by design and collaborating across teams to enhance cloud products.
Responsibilities
- Innovate by developing new solutions and identifying industry-leading practices in secure cloud environments.
- Collaborate with team members to advance state-of-the-art cloud security practices.
- Support and work alongside the CTO and SRE to enhance best-in-class cloud posture in a multi-cloud environment.
- Partner with Honeywell Global Security to understand and influence cloud security baselines, providing practical solutions that incorporate engineering considerations without introducing risk.
- Drive the establishment of cloud security baselines through policy initiatives in a multi-cloud environment, primarily focusing on Azure, utilizing automation.
- Identify metrics that will promote behavioral changes in the cloud, such as untagged cloud resources, cloud built without IaC, and overall cloud risk.
- Implement dashboards to offer insights into cloud risk and facilitate risk reduction activities.
- Support security incident and response activities by performing analysis, collaborating with stakeholders, and driving the resolution of incidents.
- Promote and apply Zero Trust architecture and principles across cloud and edge environments.
- Assist in the management and deployment of cloud baseline policies at scale through automation.
Requirements
- 5+ years of experience with a public cloud such as AWS, Azure, GCP
- Ability to perform threat modeling of cloud-based systems
- Bachelor's Degree
- Master’s Degree
- Ability to identity and define project scope and level of effort
- Experience with programming and automation
- Ability to identify and remediate issues early, analyze, and propose alternative solutions
- Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among stakeholders
- Passion for achieving results and continual self-improvement
- Experience and knowledge of Public Cloud Provider (e.g., Azure, AWS, GCP) security controls and capabilities (e.g., DDoS, Firewalls, WAF, Network Segregation)
- Understanding of secure networking design and principles
- Experience of multi-layer cloud security controls ensuring confidentiality, integrity, and availability
- Understanding of Internet of Things (IOT) security concerns, architecture, and controls
- Experience with Identity and Access Management security solutions and protocols (e.g., SAML, OpenID, and OAuth)
- Experience and understanding of Container/Kubernetes security and controls
- Understanding of security by design principles, architecture level security, API security, and Zero Trust security concepts
- Up to date knowledge of current and emerging security threats and techniques for exploiting security weaknesses
- Understanding of National and International regulatory and compliance standards
- Certifications in security demonstrating deep practical knowledge such as CCSP, or CISSP
Benefits
- Employer subsidized Medical, Dental, Vision, and Life Insurance
- Short-Term and Long-Term Disability
- 401(k) match
- Flexible Spending Accounts
- Health Savings Accounts
- EAP
- Educational Assistance
- Parental Leave
- Paid Time Off (for vacation, personal business, sick time, and parental leave)
- 12 Paid Holidays
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Senior Manager in Cybersecurity focusing on identity and access management at PwC. Leading innovative solutions and building top - performing teams to tackle complex challenges.
Lead security functions across ClearBank’s regulated cloud banking platform. Ensure safety, resilience, and compliance while collaborating with engineering and product teams.
Business Exp Plan & Admin Spec Sr. collaborating with cross - functional teams for PNC's Enterprise Technology & Security Organization. Delivering business planning processes and value - add opportunities while managing projects across physical security.
Cloud Security Engineer focused on protecting Shipt applications and guiding engineering teams in cybersecurity best practices. Designing, developing, and maintaining secure security systems in a hybrid environment.
Construction Site Superintendent overseeing construction projects for Johnson Controls, ensuring timely completion and adherence to project scope, budget, and schedule. Collaborating with teams and managing site activities in the United States.
Senior Security Architect providing security consulting and risk assessment at The Missing Link. Leading initiatives in security architecture and technology risk support within a hybrid work environment.
Apprentice Fire and Security Engineer installing, commissioning, and maintaining electronic protection systems for Johnson Controls. Collaborating in a team - based environment and gaining hands - on experience in fire and security technology.
Teaching and research role in Cybersecurity and AI at De Vinci School. Engaging in course design and research projects in a collaborative academic environment.
Data Protection Security Engineer at Fiserv designing, implementing, and maintaining cybersecurity solutions. Collaborating with teams to safeguard client information and ensure regulatory compliance.