Overview:
At KPMG, you'll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world.
As Senior Cloud Security Architect, you will lead the design and implementation of secure cloud solutions across the enterprise. You provide expert security consulting, develop scalable frameworks, and embed security into every stage of the solution lifecycle--from design through deployment.
What you will do:
Security architecture engagement: Partner with solution teams to understand business drivers, assess application portfolios, and deliver secure architecture designs. Ensure alignment with enterprise security standards and business objectives
Security workstream leadership: Define, manage, and track security workstream tasks. Ensure timely execution of deliverables and integration of security controls into project timelines and solution roadmaps
Architecture artifacts development: Create and maintain high-quality security artifacts including reference architectures, design patterns, and whitepapers. Promote reuse and consistency across solution implementations
Team leadership and mentoring: Provide guidance and mentorship to engineers, analysts, and developers. Foster a security-first mindset and ensure secure design principles are embedded in all phases of solution delivery
Threat modeling and testing: Lead threat modeling exercises to proactively identify risks. Coordinate external penetration testing and ensure remediation of identified vulnerabilities
Cross-functional collaboration: Work closely with architecture, engineering, and business teams to ensure a holistic and systemic approach to security. Build strong relationships to drive alignment and shared accountability
What you bring to this role:
Computer Science, Information Technology or Engineering degree from an accredited college or university or equivalent work experience
Minimum 10-12 years of relevant application development and IT security experience
Professional certifications in information technology security, certifications such as CISSP, CISM, Azure Cybersecurity Expert, or equivalent are highly desirable
Experience in security assessment tools, techniques and methodologies
Experience in integrating security into CI/CD solutions, enabling a secure delivery model (e.g. GitHub Actions).
Working knowledge of application security standards such as OWASP
Perform risk analysis leading to the documentation of all risks and mitigating controls within application environments.
Understanding of threat models and their function to secure applications and their environments
A good knowledge of security design, around building applications systems
Role model, promotion of a culture of good conduct and contribution to maintaining such a culture
Fast learner and critical thinker with excellent skills in problem solving and presentation
MNCJobz.com will not be responsible for any payment made to a third-party. All Terms of Use are applicable.