Responsibilities:

1. Proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls, deliver processes and secure solutions efficiently and consistently.
2. Design, Implement, Document and maintain complex cloud security infrastructure to support Application development.
3. Help teams maintain and follow Security Architecture Best Practices, established standards and provide solutions / proof of concepts.
4. Collaborate with lead cloud architects and peer Compliance, Privacy, Risk Assessment teams.
5. Analyze vulnerabilities, threats, designs, procedures, and architectural design, producing reports and sharing intelligence.
6. Assess security threats and risks in order to define and implement appropriate architectural security models.
7. Design and Support highly efficient, secure, optimized, and reliable environment on AWS and PCF Cloud environments.
8. Creating or securing cloud solutions for cloud security technologies including but not limited to identity and access management (IAM), two-factor authentication (2FA), SIEM, public key infrastructure (PKI), network security, firewalls, IDS/IPS, anti-malware, email security, web content filtering, DDoS mitigation, endpoint detection & response, patch management, configuration management, data loss protection (DLP), application security.
9. Exposure to orchestration and configuration management tools like GIT, Jenkins, Terraform, Kubernetes.
10. Perform Risk and control assessment on applications to be deployed on GKP Production environments.
11. Accessing Aqua’s Container Security Platform to provide an end-to-end security solution for containerized environments. Image Assurance, Container Firewall, Access Management, Reports and Audit trial categories are under evaluation.
12. Responsible for audit compliance, ensure appropriate security best practices are developed and implemented across the DevOps space.
13. Implement continuous process improvement, including but not limited to, policy, procedures, and production monitoring.
14. Negotiate, plan, and manage release activities with environment owners and stakeholders as needed for scheduled releases, work with the change management process to represent release quality and make sure production deployments are well orchestrated and have the proper visibility.
15. Identify and escalate risks and issues around releases and their coordination to the program team, working towards solutions for issues within the release cycle, and working with teams for root cause analysis where applicable.
16. Run Governance meetings with C level executives to share the status of application delivery.
17. Based on business requirements, designs and implements cloud-native architectures and designs that will allow those requirements to be met with a minimal degree of risk and with appropriate security controls present.
18. Represents Security Platform in development and implementation of the overall global enterprise cloud architecture.
19. Acts as Security Architecture representative while engaging with other senior technical leaders throughout organization in design and implementation of cloud and cloud/hybrid based implementations and solutions.
20. Drive automation of controls and Implemented monitoring on all enterprise applications and Infrastructure systems (Dynatrace, AppDynamics) which reduced overall critical incidents and provided self-healing features to be architected and implemented.
21. Serving as a point of contact and liaison between business, application users and tech teams to identify the technical/product/governance requirements.
22. Manage all incidents, enhancement requests and business continuity activities within SLA, to ensure flawless and quality delivery of services.