Cloud Security Architect

Role overview

As a Cloud Security Architect at Netskope, you will design and develop cloud security across a wide portfolio of public cloud services. You’ll work closely with product engineers to establish protections for emerging cloud features, develop security best practices, and contribute to an “architecture runway” that enables product teams to move quickly and securely.

Key missions

• Identify, design, and build cloud security solutions across public cloud platforms and related technology systems.
• Build and leverage threat models to secure core cloud platform services and define protection requirements for product teams to adopt emergent cloud features.
• Develop best practices, including standardized templates, and partner with Product Managers/Owners to plan and prioritize architecture-focused backlog items.

Responsibilities (implied by the missions)

• Provide architecture guidance and security requirements for multiple cloud services and systems.
• Produce technical documentation and solution/process documentation quickly and clearly.
• Collaborate with product teams to bring secure solutions to market.

Requirements

• Strong knowledge of enterprise security concepts/frameworks, secure design principles, and security best practices.
• Excellent written and verbal communication.
• Ability to work independently and lead effectively, including managing/developing a team of senior engineers and architects in a globally diverse environment.
• Understanding of cryptography as it relates to application, network, and cloud security.
• Familiarity with compliance and security frameworks/evidence needs, including:
  • FedRAMP, NIST 800-53, NIST 800-190, CSA, CIS Benchmarks, ISO 27000 series, COBIT.
• 10+ years of experience building/managing security infrastructure and solutions in the financial industry.
• Experience across on-prem, public, private, and hybrid cloud environments, including assessment, development, implementation, integration, optimization, and documentation.

Preferred / nice to have

• Security certifications such as CISSP / CCSP and TOGAF (TOGAF preferred).
• Any additional cloud security or cloud architecture certifications.
• DevSecOps experience.
• Infrastructure as Code / Policy as Code.
• Container and platform experience: Docker, Kubernetes.
• API Gateways and common web application technologies.
• Experience protecting internet-facing application hosting architectures.
• Security services/solutions implemented on GCP, Azure, and AWS.
• Moderate scripting/automation and ability to aggregate data for analysis.

Education

• Bachelor’s degree (or equivalent experience) preferred.