Job Description
We are looking for Cloud Architect- Security for Hanu Software, Greater Noida.
Job Description:
Total Exp- 12-18 Years
Work Location- Greater Noida
Roles & Responsibilities:
Technical Skills-
- Experience in Cloud Platform Expertise Azure, AWS (optional) & Google Cloud (optional).
- Experience in using architecture methodologies such as SABSA, Zachman and/or TOGAF.
- Direct, hands-on experience & strong working knowledge of managing security infrastructure & applications e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology.
- Third party Solutioning knowledge E.g. Barracuda, Fortinet, Alert Logic, Palo Alto and other Native Cloud Security tools & Solutions.
- Documented experience and a strong working knowledge of the methodologies to conduct threat-modeling exercises on new applications and services.
- Full-stack knowledge of Cloud IT infrastructure:
- Operating systems Windows, Unix and Linux
- Hypervisors
- IP networks WAN and LAN
- Active Directory
- Lightweight Directory Access Protocol (LDAP)
- Cloud (Azure, AWS & GCP) IAM
- Strong working knowledge of IT service management (e.g., ITIL-related disciplines):
- Change management
- Configuration management
- Asset management
- Incident management
- Payment Card Industry Data Security Standard (PCI-DSS)
- HIPAA-HITECH
- Validated Systems (e.g., GAMP)
- Sarbanes-Oxley
- General Data Protection Regulation (GDPR)
- NIST Cybersecurity Framework (CSF)
- Position responsibilities and expectations
Desired Candidate Profile
- Develops identity and cloud security strategy plans and roadmaps based on sound enterprise architecture practices.
- Develops and maintains identity and security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage Cloud security capabilities in projects and operations.
- Tracks developments and changes in the digital business and threat environments to ensure that they're addressed in cloud security strategy plans and architecture artifacts.
- Participates in application and infrastructure projects to provide cloud security-planning advice.
- Drafts security procedures and standards to be reviewed and approved by executive management and/or formally authorized by Information Security and Compliance.
- Determines baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, and identity and access management (IAM).
- Conducts or facilitate threat modeling of services and applications that tie to the risk and data associated with the service or application.
- Ensures a complete, accurate and valid inventory of all systems, cloud infrastructure and applications that should be logged by the security information and event management or log management tool.
- Coordinates with DevOps teams to advocate secure coding practices.
- Validates cloud IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable.
- Validates security configurations and access to security infrastructure tools, including firewalls, IPSs, WAFs and anti-malware/endpoint protection systems.
- Reviews network segmentation to ensure least privilege for network access.
- Liaise with the internal audit (IA) team to review and evaluate the design and operational effectiveness of security-related controls.
- Reviews security technologies, tools and services, and make recommendations to the broader security team for their use, based on security, financial and operational metrics.
- Liaise with other security architects and security practitioners to share best practices and insights
- Responsible for research and evaluation of new tools and technologies, and the individual is expected to stay abreast of new developments in the technology and retail industry.
- Experience in enterprise applications, solutions and Cloud infrastructures.
- Experience in platform and cloud migrations, including of Mass Migration Toolsets
Eligibility
If interested, kindly share your resume at me*********r@ha*u.com
Thanks & Regards,
Megha Panwar
Sr. Talent Acquisition
Job Classification
Industry: IT-Software, Software Services
Functional Area: IT Software - Application Programming, Maintenance,
Role Category: Programming & Design
Role: Programming & Design
Employement Type: Full time
Education
Under Graduation: B.Sc in Any Specialization, B.Tech/B.E. in Any Specialization, BCA in Any Specialization
Post Graduation: Any Postgraduate in Any Specialization
Doctorate: Doctorate Not Required
Contact Details:
Company: Hanu Software solutions India Pvt Ltd.
Address: First Floor, Plot No. 6, Signature Tower,, Ansal IT City Parks, delhi-110037 India, NOIDA, Uttar Pradesh, India
Location(s): Noida, Gurugram
Keyskills:
Cloud Security
SOC
SIEM
Vulnerability Management
Security Compliance