Cloud Security Consultant/Architect

WilsonHCG

  • Canada
  • Permanent
  • Temps-plein
  • Il y a 1 mois
Description and RequirementsWork Type: Hybrid - 4 DaysPosition Type: Contract - 6 MonthsLocation: Calgary, ABCompensation Range: $68 - $76 ( Per Hour)Our client,a multinational technology company specializing in information technology services and consulting, is seeking a " Cloud Security Consultant/Architect".The position is responsible forResponsibilities:Secure Cloud Architecture Design: Designing multi-tier, secure cloud-native solutions & Zero Trust Architecture principles. Shared Responsibility Model Understanding: Clear delineation of cloud provider vs. customer responsibilities.Risk Assessment and Threat Modeling : Identify and assess threats; perform gap analysis. Communication and Documentation: Translate complex security concepts for technical and non-technical audiences & Security policies, procedures, and architecture documentation. Stakeholder Management: Working with application, compliance, and business teams. Problem-Solving and Analytical Thinking: Swiftly identifying root causes of incidents and gaps.Qualifications:Must Have Technical/Functional Skills
  • Azure Security, Azure Advisory, Oracle Security & Advisory.
  • Cloud security consultant/architect role focuses on designing, implementing, and managing secure cloud computing environments.
  • This involves assessing security risks, developing security strategies, and ensuring compliance with industry standards.
  • They work with various cloud platforms like Azure, and Oracle Cloud to protect data, applications, and infrastructure from cyber threats.
Skill Set :
  • Cloud Platform Security Expertise: Azure: Defender for Cloud, Azure AD, Key Vault, NSG, Microsoft Sentinel
  • Identity and Access Management (IAM) : Role-based access control (RBAC), policy enforcement & Federation and SSO (OAuth, SAML, OpenID Connect).
  • Network Security : Virtual networks, segmentation, NACLs, Firewalls (Azure Firewall) and VPNs, VPC peering, private endpoints.
  • Data Protection: Encryption at rest and in transit (TLS, KMS, HSM), Data loss prevention (DLP), key management strategy & Secure storage services (S3, Blob, Cloud Storage).
  • Security Monitoring and Incident Response : SIEM integration (e.g., Splunk, Sentinel, QRadar), Threat detection tools (CloudTrail, GuardDuty, Security Hub) & Response playbooks and automation (SOAR).
  • Compliance and Governance: Frameworks: ISO 27001, NIST, CIS, HIPAA, GDPR, PCI-DSS & Cloud Governance best practices (CSPM tools: Prisma, Wiz, Check Point).
  • DevSecOps Integration : Security scanning in CI/CD (SAST, DAST, container scanning) & Infrastructure as Code (IaC) security (e.g., Terraform with Checkov, Open Policy Agent).
All interested applicants who meet the qualifications listed above are invited to submit a resume by clicking "Apply Now".The indicated pay range for this position is a good-faith estimate based on the qualifications necessary for the position, including experience, training, and other considerations permitted by law. Additionally, it is emphasized that the pay band mentioned herein is the one established by the client company. Factors that may be used when making an offer may include a candidate's skills, experience and geographic location, the expected quality and quantity of work. Most candidates will start at the bottom half of the pay range, with the upper end reserved for candidates with extensive experience and skills and who live in geographic markets commanding a higher starting pay. An employee's pay history will not be a contributing factor where prohibited by local law.This information is subject to change and serves as a general guideline for compensation discussions. Actual offers may vary based on specific circumstances and company policies.

WilsonHCG