SECURITY ARCHITECT - MCE

Position Description.
years of eexperience • Hands on experience with authentication & authorization on infrastructure platforms.
• Assist in developing and implementing policies, procedures, and guidelines related to IAM.
• Strong experience of identity and access management and security policy concepts, protocols and best practices • Strong background in windows/Linux OS, virtualization, and the Microsoft Active Directory service model.
• Hands-on experience with Penetration testing • Scripting or development skills in languages such as Python, PowerShell and ansible • understanding of Microsoft Security services (e.
., Microsoft Defender for Identity, Azure Information Protection, Microsoft Cloud App Security • Conduct infrastructure security planning, including AppSec, IDS/IPS, SIEM, and scanners for detecting vulnerability • Design, deploy, and configure PAM solutions that protect privileged accounts and credentials.
• Integrate PAM tools with existing IT infrastructure and applications.
• Strong knowledge of PAM solutions such as CyberArk, BeyondTrust, Thycotic, or equivalent tools.
• Knowledge of security controls related to infrastructure technology including enterprise storage (NAS/SANS), Windows and Linux Operation systems, ESX VMware, etc.
• Documentation skills in creating and reading (policies, procedures, SOP, playbooks, post-implementation docs) • Experience in writing or assisting in the RFP's • Maintain knowledge of cloud security on diverse cloud platforms (Azure/AWS/GCP) • Provide DevOps with security oversight and design guidance and oversee DevSecOps initiatives • Perform security operations (SecOps) responsibilities • Provide guidance on systems hardening for cyber resilience • Experience using SIEM products (e.
., Splunk, Sumo Logic) to collect data and investigate anomalies.
• Familiarity with cybersecurity standards (ISO, NIST, CISRT, CISA) • Implement and manage access controls, including role-based access control (RBAC), segregation of duties (SoD), and least privilege.
• Establish identity governance frameworks and conduct periodic access reviews to ensure compliance with SOX regulations • Familiarity with cloud IAM solutions (Azure AD, SailPoint, Zilla, etc) Skills.
• SIEM • Cyber Threat Management • IAM • Network and Infrastructure Security • SSO • MFA • Security Architectures • Endpoint security • Vulnerability management • PAM • Microsoft Azure Sentinel • Microsoft Defender • Zscaler • Crowdstrike Certification.
• Certified Cloud Security Professional (CCSP) • Certified Information Systems Security Professional (CISSP) Skills.
Security Architecture What you can expect from us.
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging.
Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life.
That’s why we call ourselves CGI Partners rather than employees.
We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value.
You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last.
You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
Come join our team—one of the largest IT and business consulting services firms in the world.