Cybersecurity Expert Lead

Job Title: Cybersecurity Solutions Architect

Role Summary:

We are seeking a seasoned cybersecurity expert to lead the design and implementation of secure architecture solutions. As a key member of our team, you will collaborate with cross-functional teams to identify security requirements and integrate security controls into the project lifecycle.

Key Responsibilities:

1. Review and support the security design for new IT projects, ensuring alignment with organizational security policies and standards.
2. Collaborate with project teams to identify security requirements and integrate security controls into the project lifecycle.
3. Design and implement secure architecture for cloud environments, leveraging best practices and industry-recognized frameworks.
4. Ensure compliance with regulatory requirements and manage security configurations for cloud resources.
5. Develop and enforce security measures for APIs, including authentication, authorization, and threat protection.
6. Implement API security best practices and manage API gateways to ensure secure data exchange.
7. On-Premises Network Security:
8. Design secure network architectures for on-premises environments, including segmentation, firewalls, and intrusion detection systems.
9. Architect and oversee the implementation of security measures for e-commerce platforms, ensuring compliance with industry standards and best practices.
10. Architect DevSecOps, CI/CD pipeline.
11. Design and support microservice architectures to enhance system scalability, flexibility, and maintainability.
12. Collaborate with cross-functional teams to understand technical, security, and business requirements and translate them into well-architected solutions.
13. Support risk assessments and develop mitigation strategies to ensure the security and integrity of data and IT systems.
14. Stay updated with the latest trends and technologies in data management, security architecture, and e-commerce platforms.
15. Provide technical leadership and guidance to development teams, ensuring best practices in coding, design, and architecture.
16. Prepare detailed documentation of architectural designs, security protocols, and implementation plans.
17. Participate in the evaluation and selection of new technologies and tools to enhance the organization's capabilities.

Requirements:

• Minimum of 5-7 years of experience in solution architecture, with a focus on data management and cybersecurity.
• Demonstrated experience in architecture and design solutions using Azure Data Lake and other data analysis tools.
• Hands-on experience with security architecture for e-commerce platforms.
• Experience in developing and implementing microservice architectures.
• Familiarity with cloud security, application, database, and API architecture best practices.
• Computer Science or relevant degree.

Preferred Certifications:

• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Azure Security Engineer Associate
• Trend Micro Certifications
• Microsoft Certified: Identity and Access
• Certified Data Management Professional (CDMP)
• AWS Certified Solutions Architect: Validates expertise in designing and implementing secure architectures for AWS-based solutions.

Skills and Competencies:

• Understanding of cybersecurity frameworks and compliance requirements.
• Knowledge of designing secure networks, applications, and cloud architecture.
• Understanding of IAM principles, including user provisioning, authentication, and authorization techniques.
• Familiarity with security tools, such as SIEM, IDS/IPS, and endpoint protection.
• Strong design knowledge and experience working with Trend Micro Vision One, XDR platform, email security, EDR, email security, PAM, IPS, WAF, and DLP technologies.
• Ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing.
• Ability to challenge concerns and report through appropriate channels.
• Self-drive, motivation, and ability to work independently to deliver expected outcomes.
• Strong analytical and report writing skills.

API Security:

• Understanding of API protocols: Knowledge of REST, SOAP, and GraphQL.
• Authentication and Authorization: Familiarity with OAuth, JWT, and API keys.
• Threat Protection: Implementing rate limiting, IP whitelisting, and DDoS protection.
• Data Encryption: Ensuring data is encrypted in transit and at rest.
• API Gateway Management: Experience with tools like Azure API Management, Kong, or Apigee.

Azure Architecture:

• Azure Services: Proficiency with Azure services such as Azure Virtual Machines, Azure Kubernetes Service (AKS), Azure Functions, and Azure Storage.
• Networking: Understanding of Azure Virtual Networks, Subnets, and Network Security Groups.
• Security Best Practices: Implementing Azure Security Center recommendations and Azure Policy.
• Infrastructure as Code (IaC): Experience with ARM templates, Bicep, or Terraform for deploying Azure resources.
• Monitoring and Logging: Using Azure Monitor, Log Analytics, and Application Insights for tracking and diagnosing issues.

Identity and Access Management (IAM):

• Azure Active Directory (AAD): Deep knowledge of AAD, including user and group management, conditional access policies, and identity protection.
• Role-Based Access Control (RBAC): Implementing and managing RBAC in Azure to control access to resources.
• Single Sign-On (SSO): Configuring SSO for applications using AAD.
• Multi-Factor Authentication (MFA): Enforcing MFA for enhanced security.

---