Security Architect

Within the team responsible for technological architecture, the holder brings their experience and technical skills to the implementation, maintenance, and evolution of the organisation's technological architectures. The specialist addresses all design aspects, whether technical or procedural and organisational advisory.

Education

University Bachelor's degree in computer science, EPF engineering diploma, or other equivalent qualification.

Key Skills

• Mastery of security standards and frameworks (ISO 27001 / 27002, NIST, CIS, OWASP, etc.).

• Expertise in Cloud and hybrid architectures.

• Strong knowledge of application security (AppSec and DevSecOps).

• Advanced knowledge of security technologies (WAF, XDR, IAM, PAM, PKI, cryptography, microsegmentation, etc.).

Important Skills

• Good knowledge of Ethical Hacking.

• Knowledge of the legal and regulatory framework regarding data protection (FADP, GDPR and applicable regulations).

• Knowledge of methodologies and best practices for information and document management systems (ITIL, ISO 9000 and ISO 20000 families).

• Skills in analysis and synthesis, dashboard development, and technical risk assessment.

• Good knowledge of enterprise architecture processes and best practices.

• Good knowledge of cloud architecture security (IaaS-PaaS-SaaS-CaaS).

• Knowledge of J2EE application servers (JBoss, Tomcat, Apache, Nginx) and IIS.

• Knowledge of operating systems (Unix: AIX, Windows, Linux: Suse, Debian, RedHat...).

• Knowledge of container hosting and execution solutions (OpenShift, Podman).

• Knowledge of IaC principles and associated tools: Ansible / YAML, Git.

• Knowledge of architecture modelling following the Archimate method, including the use of the iServer solution.

Main Activities

• Design security services that comply with current security standards and provide the expected service levels.

• Provide assistance and support to architects and technical teams in integrating and implementing security best practices and requirements for applications, infrastructures, and services, from the design phase throughout the project duration.

• Document and provide implementation examples for security requirements to ensure they are well understood by teams.

• Collaborate closely with architects and development and operations teams to ensure risks are well understood and properly managed from system design.

• Collaborate closely with development and operations teams to optimise system security while considering operational constraints.

• Validate architectures of new solutions or their updates and propose alternatives or corrections in case of non-compliance.

• Provide operational support to technical teams, notably through the development of guides, checklists, or the implementation of secure design workshops.

Required Qualities

• High personal integrity and ethics; ability to maintain absolute confidentiality and discretion regarding processed information.

• High level of autonomy, exemplary rigour, and pragmatism.

• Ability to make decisions and enforce them.

• Listening skills, teamwork ability, and stress resistance.

• Ability to self-reflect and pursue training.

• Flexibility, adaptability, understanding of business needs and constraints.

• Impeccable professional ethics.

• Ability to manage conflict situations.

• Good writing skills and ease of expression.