Cloud Security Architect (US Remote)

Company Description

Ready to make a difference? Experian has evolved into a global tech company and leader in data and analytics. We’re passionate about unlocking the power of data in order to transform lives and create opportunities for consumers, businesses and society. We’re a constituent of the FTSE 30 and for more than 125 years we’ve helped economies and communities flourish – and we’re not done.

Discover the Unexpected - Our 22k amazing employees in 30+ countries believe the possibilities for you, and the world, are growing. We’re investing in the future, through new technologies, talented people and innovation so we can help create a better tomorrow. To do this we employ ‘big-thinkers’ and ‘can-doers’ that share our purpose #uniquelyexperian

Job Description

What you'll be doing

Experian is seeking a motivated and customer-oriented Cloud Security Architect to join our team. This role will be an individual contributor to work with and guide Experian’s application teams and help them build and manage a secure cloud infrastructure by adhering to Experian’s cloud security policy and industry best practices. This is a growing team with senior leadership support and visibility. This role is involved in projects or issues of high complexity that requires an individual who can challenge the status quo and drive efficiencies through the process.  

Responsibilities

• Lead Experian’s global cloud security and tech transformation strategy by driving the architecture of critical automated security capabilities into Experian’s enterprise CI/CD pipelines
• Work with Experian’s enterprise cloud architects and engineers to build modernized multi-hybrid automated cloud security controls
• Work closely with our Cloud Engineers, Solutions Engineers, and DevOps team to operationalize Experian security policies
• Create and gain stakeholder buy-in of cloud/hybrid security architectures that achieve key business strategies
• Help governance, compliance, and risk management teams to ensure the system consistently meets the requirements for certification and accreditation
• Effectively communicate to management and business sponsors the status of projects and issues as they relate to cloud security
• Provide clear, consistent, regular communication with all project stakeholders at all levels, including presentations to senior management, creating agendas and meeting minutes
• In-depth research of the latest in cloud security tools, techniques and best practices and technologies to remain at the bleeding edge
• Drive security best practices and raise awareness of risks pertaining to containerized environments
• Create and support KPIs and KRIs that measure risk reduction and progress in cloud security over time.
• Build a great working relationship with team members and development teams

Qualifications

What your background looks like

• College degree or equivalent and 10+ years related work experience required
• 3-5+ years' of experience as a DevSecOps Engineer and/or experience in Cloud Architecture and Engineering
• 3-5+ years' of experience with Amazon Web Services (AWS)
• Deep understanding of configuring security policies and securing applications and data
• Proficiency in scripting/programming languages such as Python, JavaScript, Ruby, C#, PowerShell
• In-depth knowledge of DevSecOps principles and experience with CI/CD tools such as Terraform, Jenkins, Harness, and Open Policy Agent (OPA)
• Experience working with technology architects and writing security Policy as Code (PaC) or working as a DevSecOps engineer with extensive (IaC) experience
• Good understanding of container offerings and capabilities within Amazon Web Services (AWS), GCP, and Microsoft Azure platforms such as EKS, ECS, AKS, GKE, etc. 
• In-depth knowledge of CIS Benchmarks for cloud and container platform configuration best practices
• Experience with deployment orchestration, automation, and security configuration management (Jenkins, Puppet, Chef, Git, CloudFormation, Terraform, Ansible) preferred
• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within SaaS, IaaS, PaaS, and other cloud environments
• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.)
• Industry Cloud Certifications (Azure/AWS/GCP)
• CISSP certification preferred

Perks

• 20 days of vacation accrued annually, five sick days, and two volunteer