Job description:
- Create and Implement via Terraform security concepts and architectures in various cloud environments (GCP, Azure, Alibaba, OpenShift), with focus on GCP, conduct security assessments and risk analyses of cloud infrastructures and work with internal teams to ensure optimal security solutions.
What you will do:
- Create and Implement via Terraform security concepts and architectures in various cloud environments (GCP, Azure, Alibaba, OpenShift), with focus on GCP,
- Conduct security assessments and risk analyses of cloud infrastructures and work with internal teams to ensure optimal security solutions,
- Identify cloud security gaps and develop risk mitigation measures, predominantly via code,
- Enforce security guard-rails (policy restrictions) in cloud environments via code,
- Monitor CNAPP (CSPM, CIEM, CWPP) cloud security risks and address them accordingly for resolution,
- Develop and enforce whenever possible Kubernetes Security Best Practices
What makes you a good fit:
- Degree in Computer Science, Information Security or a comparable qualification
- Expertise in the design and implementation via code of security concepts (e.g. organization policies) for cloud platforms (GCP and OpenShift is a must, Azure and Alibaba is preferable)
- Expertise in setting up and managing CNAPP solutions
- Expertise in ASPM (Application Security Posture Management) and DevSecOps is a plus
- Advanced Kubernetes skills and Advanced Terraform coding skills
- Good knowledge of network security, identity and privilege access management, landing zone concepts for cloud platforms (Azure, GCP, Alibaba, Openshift) and usage of project factories for complete cloud landing zone set-up via code
- 7+ years of professional experience in the field of cloud security with good communication skills in English
