Cloud Security Engineer

Job description

  

Richemont owns some of the world’s leading luxury goods Maisons, with particular strengths in jewellery, fine watches and premium accessories. Each Maison represents a proud tradition of style, quality and craftsmanship and Richemont seeks to preserve the heritage and identity of each of its Maisons. At the same time, we are committed to innovation and designing new products which are in keeping with our Maisons’ values, through a process of continuous creativity.

MAIN PURPOSE
As a Cloud Security Engineer, you are part of the Cloud Platform team within the Infrastructure & Cloud Services department. You will help hone that vision, craft an architecture and roadmap that moves us to the cloud, and then work to execute on that plan. You will support identifying provisioning requirements, set best practices, develop infrastructure and automation tools that facilitate deployments, and help the technical team build new software or convert existing packages for use in the cloud.

KEY RESPONSIBILITIES

·  In collaboration with the Cloud Platform team and other major stakeholders, you will be responsible for ensuring proper security and compliance in all the infrastructure deployed in our main Public Cloud Providers
·  Partner withGroup Technology & Group Security teams to develop best of breed secure architectures supporting compliance (e.g. PCI DSS, ISO 27001, HIPAA), customer requirements and operational SLAs.
·  Act as the first line of defense by proactively addressing customer needs for technical assistance and coordinating and prioritizing timely resolutions with engineering teams.
·  Provide practical guidance to engineering and project teams to support the implementation of security controls, guidelines, recommendations and best practices.
·  Define and implement Secure Development Lifecycle (SDL) processes and (automated/devops) tools.
·  Actively participate to conferences and summits in relation to cloud, incl. information security and compliance topics, and provide guidance and feedback in terms of technologies available in the market.
·  Constantly investigate and evaluate industry trends through PoVs/PoCs in order to maintain technology awareness in order to propose and validate technical solutions.

 

PROFILE

·  You have 3 to 5 years of experience as a Cloud Security engineer in an international context.
·  Minimum 2 years of experience in Information Security

SKILLS

·   Strong knowledge of various infrastructure and platform components (e.g. network and content delivery, federated identity, security, compute, data store, database, load balancing, operating systems, etc.).
·  Familiarity with public cloud infrastructure design and implementation.
·  Experience in delivering cloud secure architectures meeting best practice industry security standards.
·  Extensive appsec, encryption, data protection, and tool integration experience. Hashicorp Vault/Consul, F5 BigIP, Zscaler is a plus.
·  Experience designing, configuring, implementing and leveraging cloud services models such as SaaS, PaaS, and IaaS for system security.
·  Strong understanding of application security and industry standards and best practices (e.g. OWASP, SANS, NIST, CIS, etc.).
·  Experience with or exposure to compliances (FedRAMP, SOC-2, PCI, ISO 27k, GDPR). AWS Config, CloudCustodian or Dome9 is a plus.
·  A good understanding of systems hardening, containerization, and cloud security controls.
·  Comfortable and confident when speaking with clients as a technical expert and able to translate technical concepts into simple terminology for clients of various levels.
·  Ability to lead and complete projects independently, as well as be able to delegate tasks to others.
·  Be proactive and manage expectations. Adjust to shifting priorities in a fast-paced, dynamic environment.
·  Demonstrated ability to develop and manage effective working relationships within an organization and across multiple clients and/or stakeholders.

 

EDUCATION

·  Graduated in an Engineering School, Bachelor or Master Degree in digital/web technology, Computer Science or related field.
·  One or more security certification such as SANS/GIAC, CISSP, Security+ is a plus
·  AWS, GCP and/or Alibaba Certifications (AWS Certified Security, Google Security Engineer, Alibaba Cloud Security Associate/Professional), is a plus.
·  Fluent in English and French is an asset.