Project Assurance (Security Architect)

Cloud Security Deep understanding of cloud platforms (AWS, Azure, GCP) and cloud security frameworks, such as the Cloud Security Alliance (CSA). Experience with cloud-native security tools, including IAM, cloud workload protection (CWP), and security posture management. Identity and Access Management (IAM) Proficiency in IAM protocols (OAuth, SAML, LDAP, Kerberos) and experience with SSO, MFA, and PAM solutions. Knowledge of leading IAM tools like Okta, Azure AD, CyberArk, and Ping Identity. Network and Infrastructure Security Strong knowledge of network security architectures, such as firewalls, VPNs, WAFs, IDS/IPS, and network segmentation. Familiarity with Zero Trust principles and network micro-segmentation practices. Application Security and DevSecOps Hands-on experience with secure coding practices and SDLC integration for security. Knowledge of security testing tools (e.g., Burp Suite, OWASP ZAP, Veracode) and experience with CI/CD pipeline security integration. Data Protection and Encryption Familiarity with data encryption standards (e.g., AES, RSA) and key management solutions (e.g., AWS KMS, Azure Key Vault). Knowledge of data classification, tokenization, and data loss prevention (DLP) tools. Risk Assessment and Compliance Understanding of risk management frameworks (NIST, ISO 27001) and experience conducting security risk assessments. Familiarity with compliance standards (e.g., GDPR, HIPAA, PCI-DSS) and relevant certification controls. Threat Modeling and Incident Response Experience with threat modeling techniques and tools (e.g., Microsoft Threat Modeling Tool). Knowledge of incident response frameworks and processes, and experience collaborating with SOC and IR teams. Automation and Scripting Proficiency with scripting languages (e.g., Python, PowerShell) for security automation. Familiarity with infrastructure as code (IaC) tools (e.g., Terraform, Ansible) for secure infrastructure automation.