Architect - Design Assessment

Profile Description :

• Strong expertise in cybersecurity principles and best practices
• Thorough understanding of various security standards, framework, and certifications / attestations e.g., ISO 27001, HIPAA, HITRUST.
• 10-12 years of experience in Information Security, specializing in reviewing cloud infrastructure and applications.
• Proficiency in Cyber Security Risk Assessment, Cloud Security Assessment, Defense in Depth, and Security Architecture patterns.
• Hands-on experience with Threat Modelling techniques such as STRIDE, PASTA, and familiarity with IAM, App Sec, SDLC, Data Security, Network Security, Encryption, Logging & Monitoring.
• Experience with Okta and Entra ID is preferable
• Strong experience in assessing and implementing security controls for GCP & AWS cloud platforms and resources
• Strong experience assessing and recommending security controls for Container based applications.
• Experience in Assessing and Recommending Security controls for Data Analytics , Data Warehouse and AI based applications
• Familiarity with GCP Command Center, AWS Security Hub and mitigating vulnerabilities.
• Experience with Cloud Access Security Broker, CSPM, CWPP, PaaS, and IaaS security requirements in Azure, GCP, AWS, and AKS.
• Individual handling of design / solution reviews across cloud and SaaS providers, ensuring security due diligence.
• Understanding of Cloud Security Alliance Cloud Control Matrix (CSM) and CSA Security guidance.
• Management of security projects and technical assessments across multiple geographies.
• Strong analytical and troubleshooting skills, along with excellent communication and interpersonal abilities.
• Experience with cloud infrastructure like GCP and AWS and familiarity with concepts like Zero Trust Architecture, Cloud Security, Firewall rule reviews, and Conditional Access.
• Scripting knowledge (e.g., Powershell) is advantageous, and CISSP and CCSP certifications are a plus.

Skills Required

Design Patterns, System Architecture, Cloud Computing, API Design, Agile Methodologies, Database Management, Performance Tuning