Job Description Summary
As part of the Security Architecture & Advisory team, the Lead Platform & Cloud Security Architect will be responsible for designing, implementing, and maintaining robust security solutions for Sandoz's technology platforms, with a specific focus on securing databases, middleware components, and API gateways, SAP environment, and public cloud (AWS, Azure) private cloud (OpenShift, Kubernetes) environments. Your expertise in these areas will be crucial in ensuring the confidentiality, integrity, and availability of our systems and data.Job Description
Major accountabilities:
Your responsibilities include, but are not limited to:
Develop the strategy, future state architecture and roadmap for technology platforms
Architect and design secure and resilient solutions for public and private cloud (AWS, Azure, Kubernetes, OpenShift), databases, middleware, and API gateways, SAP, MS Power Platform, VMware Aria, considering industry best practices, regulatory requirements, and organizational needs
Conduct comprehensive security assessments of technology platform components, identifying vulnerabilities and recommending appropriate remediation strategies.
Develop and enforce security policies, standards, and procedures related to technology platform architecture and deployment
Stay up to date with emerging security threats, vulnerabilities, and industry trends and assess their potential impact on the organization's platforms
Provide guidance and support to implementation teams on securing public and private cloud, databases, middleware components and API gateways, SAP etc.
Act as a subject matter expert and provide guidance on security topics related to the technology platform to stakeholders, management, and executives
Develop and maintain strong relationships with key stakeholders, vendors and strategic external partners.
Work collaboratively with product teams and key stakeholders to determine business and user requirements for end-user devices
Minimum Requirements:
Master of Science degree or equivalent experience in computer science, engineering, information technology or other relevant field(s)
Fluent in written and spoken English
At least 8 years of experience in security related to technology platforms including public and private cloud
Proven experience working as a Security Architect or similar role, with an expertise in public cloud, database, middleware and API gateway security.
Strong knowledge of database management systems (e.g., Oracle, MS SQL Server, MySQL) and middleware technologies (e.g., Apache, WebLogic, IBM MQ, Axway, Boomi).
Strong knowledge of SAP infrastructure and/or MS Power Platform
Strong knowledge of database security principles, including access controls, encryption, data masking, and auditing
Deep understanding of middleware security concepts, including secure configuration, transport layer security, and message integrity
Expertise in securing API gateways, including authentication, authorization, and protection against common API vulnerabilities
Experience working in a global company and designing / deploying solutions at scale
Excellent negotiation, communication, and interpersonal skills with the ability to develop influential relationships with different stakeholders across all levels
Preferred Requirements:
Knowledge with security frameworks and standards such as ISO 27001, CIS Controls, NIST, and Cyber Essentials is a plus
Certification or accreditation in Information Security (CISM, CISA, CISSP, etc.,) and/or relevant vendor specific certifications is a plus
Languages:
English.
Skills Desired
Escalation, Information Security Audit, Information Security Risk Management, Quality Management, Root Cause Analysis (RCA), Sec Ops (Security Operations), Vendor Management