Position: Security Cloud Architect
Company: GlobalLogic
Category: Lead
Experience required: 5y
English level: upper

**Description**

Client – the worldwide manufacturer of smart beds, which increase the overall quality of sleep. The solution senses and automatically adjusts the comfort level:
- Tracking personal sleep data during the night
- Individual comfort and temperature balancing
- Comfort adjustability on each side of the bed

The project is related to developing cutting-edge sensor technology and data processing algorithms.

**Requirements**

- 3 years architecting, designing, building cloud services in IoT domain
- 5-10 years of IT experience
- Heavy security experience across cloud architecture deployments, governance, and general cloud security controls
- Knowledge of a variety of ways of testing for products security (entropy testing, penetration testing, side-channel attacks, various cryptanalysis techniques etc)
- Lead the improvement of governance, compliance, and quality assurance across embedded and cloud security architectures supporting vertical and horizontal business units
- Full knowledge of information risk management frameworks, regulations, data protection guidelines and standard
- Ensure that embedded and cloud solutions follow security and compliance controls
- Expert in cloud and security tools, processes, and implementation
- Understanding of network design principles with knowledge of virtualized environments and implementation of security controls in a virtual infrastructure
- Experience with one or more security frameworks – Cloud Security Alliance, PCI DSS, Assurance Registry from the Cloud Security Alliance
- Practical experience in AWS or other cloud platforms
- Some experience with cloud software design patterns (micro-services, containers, FaaS, NoSQL)
- Experience with programming in at least one programming language (Java, C#, C++, Python, etc.)
- Understanding embedded software development and architectures, security protocols, applied cryptography (Symmetric and public key cryptography) and security standards
- Knowledge of the emerging cloud technologies and ecosystem and how to integrate with it
- Bonus point for experience with IoT or connected devices

**Responsibilities**

- Establish core enterprise architecture principals, patterns, policies and decisions for product security (Embedded and cloud platform). Drive the adoption of the principles across the distributed teams.
- Determining the correct level of product security for a product and market
- Analyzing and recommending architectures for security product implementation
- Ensure that product solutions (Embedded and cloud platform) follow security, compliance controls, and conformance to the company IT security standards
- Communicating architecture decisions throughout the organization and ensuring that implementations meet security requirements
- Knowledge with modern cloud computing platforms such as FaaS and Containers; Open Source software frameworks such as Hadoop and Sparks; NoSQL databases; and ML
- Evaluate security solutions and tools
- Present and communicate to the senior leadership