Cloud Infrastructure Architect - IAM
Dallas, TX, United States
Full Time Senior-level / Expert USD 120K - 200K
Publicis Groupe
Company Description
Publicis Sapient is a digital transformation partner helping established organizations get to their future, digitally-enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity. United by our core values and our purpose of helping people thrive in the brave pursuit of next, our 20,000+ people in 53 offices around the world combine experience across technology, data sciences, consulting and customer obsession to accelerate our clients’ businesses through designing the products and services their customers truly value.
Job Description
Your Impact:
- Design, implement, and manage cloud infrastructure solutions on GCP platform.
- Collaborate with software engineering teams to define infrastructure requirements and design scalable and reliable cloud architectures.
- Automate infrastructure provisioning, configuration, and deployment using Infrastructure as Code (IaC) tools such as Terraform
- Implement best practices for cloud security, compliance, and governance, including identity and access management (IAM), organization policy, deny policy, encryption, and network security.
- Experience with Hashicorp Vault and GCP Cloud KMS.
- Experience with GCP cloud identity and GCDS tool.
- Monitor, optimize, and scale cloud infrastructure resources to ensure performance, availability, and cost-efficiency.
- Troubleshoot and resolve issues related to cloud infrastructure, including performance bottlenecks, network connectivity, and resource contention.
- Develop and maintain documentation, standards, and policies for cloud infrastructure design and operations.
- Stay current with cloud technologies, trends, and best practices, and provide recommendations for continuous improvement.
- Knowledge of python is a plus.
Qualifications
Your Skills and Experience: Understanding of Cloud Platforms: Proficiency in Google Cloud Platform (GCP) is essential. This includes understanding their IAM services and how they integrate with other cloud services.
- Have good understanding of tools like Jenkins, helm charts, Kubernetes etc
- IAM Concepts: Deep understanding of IAM concepts such as authentication, authorization, federation, multi-factor authentication (MFA), single sign-on (SSO), role-based access control (RBAC), and least privilege principle.
- Security Knowledge: Strong knowledge of security principles, encryption techniques, data protection, and compliance requirements related to IAM in cloud environments.
- Networking: Understanding of networking concepts including TCP/IP, DNS, routing, VPNs, firewalls, and load balancers as they relate to IAM and cloud infrastructure.
- Identity Protocols: Familiarity with identity protocols such as OAuth, OpenID Connect, SAML, LDAP, and Kerberos, and how they are used in cloud IAM solutions.
- Scripting and Automation: Proficiency in scripting languages like Python, PowerShell, or Bash for automating IAM-related tasks and workflows.
- IAM Solutions: Experience with IAM solutions and services provided by cloud providers (e.g., Google Cloud IAM) as well as third-party IAM solutions.
- Compliance and Governance: Knowledge of compliance standards such as GDPR, HIPAA, PCI DSS, and their implications on IAM practices in the cloud. Understanding governance frameworks and best practices for IAM.
- Problem-Solving Skills: Ability to analyze complex IAM requirements, identify potential issues, and design scalable and secure solutions to meet business needs.
- Communication and Collaboration: Effective communication skills to collaborate with stakeholders, understand their requirements, and translate them into IAM solutions.
- Continuous Learning: Given the rapidly evolving nature of cloud technologies and security threats, a willingness to continuously learn and stay updated with the latest trends and best practices in cloud IAM is crucial.
- Project Management: Ability to manage IAM projects effectively, including defining project scopes, timelines, and resources, as well as coordinating with other teams and stakeholders.
Set Yourself Apart With:
- Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL
- Cloud Computing certifications such as CCSK, Microsoft Certified: Security Operations Analyst Associate
- Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
- Experience working in regulated environments
- Exposure to agile development, DevOps, SecOps and scrum teams
- Hands-on-experience with cloud security designs on GCP
- Development experience (python, Node)
- Strong desire to learn and contribute solutions and ideas to broader team
Additional Information
Flexible vacation policy; time is not limited, allocated, or accrued
• 16 paid holidays throughout the year
• Generous parental leave and new parent transition program
• Tuition reimbursement
• Corporate gift matching program
As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at hiring@publicissapient.com or you may call us at +1-617-621-0200.
Pay Range: $120,000 - $200,000
The range shown represents a grouping of relevant ranges currently in use at Publicis Sapient. Actual range for this position may differ, depending on location and specific skillset required for the work itself.
Tags: Agile Application security Automation Bash CCSK CCSP CISA CISM CISSP Cloud Compliance DevOps DNS Encryption Firewalls GCP GDPR Governance Helm HIPAA IAM ITIL Jenkins Kerberos Kubernetes LDAP Network security NIST OpenID PCI DSS PowerShell Python SAML Scripting Scrum SecOps SSO Strategy TCP/IP Terraform VPN
Perks/benefits: Career development Flex hours Flex vacation Parental leave
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Product Security Engineer jobs
- Open Cybersecurity Analyst jobs
- Open Security Operations Engineer jobs
- Open Information Security Officer jobs
- Open Principal Security Engineer jobs
- Open Senior Cyber Security Engineer jobs
- Open Information Security Specialist jobs
- Open Senior Product Security Engineer jobs
- Open Chief Information Security Officer jobs
- Open IT Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Senior Penetration Tester jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Security Specialist jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Network Security Engineer jobs
- Open Cybersecurity Consultant jobs
- Open Security Consultant jobs
- Open Senior Information Security Analyst jobs
- Open IT Security Analyst jobs
- Open Security Operations Analyst jobs
- Open Manager Pentest H/F jobs
- Open Information System Security Officer jobs
- Open Information Security Architect jobs
- Open Agile-related jobs
- Open Risk assessment-related jobs
- Open Network security-related jobs
- Open Analytics-related jobs
- Open SOC-related jobs
- Open CISA-related jobs
- Open ISO 27001-related jobs
- Open GCP-related jobs
- Open IAM-related jobs
- Open Application security-related jobs
- Open Pentesting-related jobs
- Open Threat intelligence-related jobs
- Open Vulnerability management-related jobs
- Open DevOps-related jobs
- Open DoD-related jobs
- Open Security Clearance-related jobs
- Open APIs-related jobs
- Open CEH-related jobs
- Open Security assessment-related jobs
- Open SaaS-related jobs
- Open Malware-related jobs
- Open Kubernetes-related jobs
- Open Java-related jobs
- Open EDR-related jobs
- Open PowerShell-related jobs