Cloud Security Architecture Lead

ZS is a professional services firm that works side by side with companies to help develop and deliver products that drive customer value and company results. From R&D to portfolio strategy, customer insights, marketing and sales strategy, operations and technology, we leverage our deep industry expertise and leading-edge analytics to create solutions that work in the real world. Our most valuable asset is our people—a fact that’s reflected in our values-driven organization in which new perspectives are integral and new ideas are celebrated. ZSers are passionately committed to helping companies and their customers thrive in industries ranging from healthcare and life sciences, to high-tech, financial services, travel and transportation, and beyond. ZS's Information Security team is seeking an experienced and highly skilled candidate to work with our Cloud Center of Excellence and software development departments supporting our Cloud infrastructure and DevSecOps strategies. As a member of the Information Security team working out of our Evanston, IL office, the individual will have responsibilities in developing and implementing a robust security strategy and design to secure our cloud infrastructure and cloud-native applications. As a valued member of the team, this individual will also work closely with the rest of the Information Security team in other aspects of securing ZS’s enterprise. ESSENTIAL JOB FUNCTIONS: Partner with centers of excellence across ZS, including IT, Software Development, Business Technology and Cloud, for information security strategy and techniques Assist in developing and maintaining a robust security strategy designed to address risks associated with cloud infrastructures and cloud-native applications Work closely with development teams in the design of cloud native services and infrastructure Review and assess current cloud infrastructures to identify gaps and mitigations Prepare and document policies and standards around cloud security Develop and educate employees in multiple roles and levels on secure cloud practices Perform research and evaluate security technologies designed to protect cloud infrastructure and cloud-native applications and systems Design and implement guardrails and other controls Build out pragmatic and reusable solutions for security problems Assist with other security related initiatives as they arise KNOWLEDGE, SKILLS & ABILITIES: In this position, abilities such as formulating short and long-term strategies and communicating at all levels (technical, management, executive, etc.) will be required Exceptional understanding of security principles, strategies, and goals Deep understanding of AWS Well Architected Framework and best-practice security design principles Ability to successfully balance and prioritize security needs with other deliverable timelines, budgets, etc. Strong understanding of Windows OS security threats and mitigations Strong understanding of Linux Kernel-level security threats and mitigations Strong experience with securing Kubernetes at the Pod/Node/Cluster levels including network policy, node to node encryption, mutual TLS, etc. Strong experience in Container Management and DevSecOps pipeline Knowledge of AWS networking (security groups, ACL, etc.), IAM, STS, WAF, Shield and ALB protections Knowledge of Azure and GCP security architecture and configuration is a plus Ability to actively assess existing cloud infrastructures to identify gaps and mitigations Thorough understanding of the latest security principles, techniques, and tooling Able to multitask and prioritize in a dynamic environment with continuously shifting priorities Ability to communicate security concepts and issues to peers and management Possess and maintain up-to-date understanding of emerging trends in cloud native security including research of the latest products to combat these threats Strong analytical and problem-solving skills Excellent verbal and written communication skills Demonstrated personal initiative in maintaining a continuous high level of professional knowledge in areas of cloud security EDUCATION & EXPERIENCE: Bachelor's degree in Information Security, Engineering, Computer Science, IT or related field At least 5-7 years of relevant experience AWS Architect Certification / AWS Certified Security – Specialty / Azure Solutions Architect or equivalent desired One or more of the following certifications strongly preferred: Cloud security / architecture certifications CISSP (and/or other ISC2 certifications) SANS GIAC certifications CEH, OSCP, or other penetration testing certifications Other industry recognized certifications or accreditations ZS is a global consulting firm. Fluency in English is required; additional fluency in at least one European or Asian language is desirable. Candidates must possess or be able to obtain work authorization for their intended country of employment. An on-line application, including a full set of transcripts (official or unofficial), is required to be considered. ZS offers a competitive compensation package with salary and bonus incentives, complete medical/dental/life insurance programs and retirement savings benefits. ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law. ZS is committed to providing and maintaining a safe workplace. Must have received or be willing to receive the COVID-19 vaccination by date of hire to be considered. Proof of vaccination will be required. Religious/Medical Exemptions can be requested on a limited basis upon hire. NO AGENCY CALLS, PLEASE.