Cloud Security Architect

VITA Tech is a US Based technology services and outsourcing company, founded in 2014 which was formerly called as Techflow Solutions Inc. We are a certified Minority Business Enterprise and certified Women Owned Small Business. VITA Tech collaborates with clients to help them become highperformance businesses by combining unparalleled experience, comprehensive capabilities across all industries and business functionsCloud Security Architect Long term Contract Remote Responsibilities

• Ability to analyze stakeholder requirements and convert into secure and scalable cloud solutions.
• Review application architectures and implementation details for design flaws, incorrect security implementation and missing security controls.
• Create threat models to communicate risks to engineers, project managers and other technical teams.
• Address compliance and privacy issues based on the requirements for CCPA, GDPR, Sarbanes-Oxley Act (SOX) etc.
• Implement Secure Software Development Life Cycle (S-SDLC) processes and develop secure coding guidelines
• Implement DevSecOps model while working with DevOps team to automate security in CI/CD.
• Build out new security control catalog, security policies and procedures and assist in enforcing them.
• Use Static and Dynamic Analysis tools to support broad testing and vulnerability discovery in the CI/CD pipeline.
• Design, implement and manage Layer7 firewall with centralized ingress and egress Internet.
• Implement and validate the security principles of minimum attack surface area, least privilege, secure defaults, avoiding security by obscurity, keeping security simple and fixing security issues correctly.
• Manage and audit data security; establish best practices for role-based access to data.

• Google Cloud Platform Experience (Professional Cloud Security Engineer certification)
• Experience with DevSecOps, Code Security, Container Security and relevant tools.
• Infrastructure knowledge (Networking, Security, DNS, Fortinet Virtual Firewall)
• Google Cloud Platform Cloud native security controls

• Ideal candidate should have 10+ years of prior experience in IT in network security, information security and infrastructure in a high-tech environment.
• 5+ years successfully architecting and implementing security and DevSecOps on public cloud solutions (AWS or Google Cloud Platform).
• Proven work experience as a Cloud Security Architect or similar role in a cloud native environment.
• Deep hands-on experience leading the design and deployment of technology infrastructure and associated security controls.
• Experience in solutions for data security, data masking, data classification, data anonymization.