Cloud Security Consultant/Architect

long term Contract // Calgary AB//Canada . Please share resumes to Amarjeet.Kumar@akkodisgroup.com

Role:- Cloud Security Consultant/Architect
Location- Calgary AB
Employment Type: Contract

Role: Cloud Security Consultant/Architect

Roles & Responsibilities
Secure Cloud Architecture Design: Designing multi-tier, secure cloud-native solutions & Zero Trust Architecture principles.
Shared Responsibility Model Understanding: Clear delineation of cloud provider vs. customer responsibilities.
Risk Assessment and Threat Modeling : Identify and assess threats; perform gap analysis.
Communication and Documentation: Translate complex security concepts for technical and non-technical audiences & Security policies, procedures, and architecture documentation.
Stakeholder Management: Working with application, compliance, and business teams.
Problem-Solving and Analytical Thinking: Swiftly identifying root causes of incidents and gaps

Must Have Technical/Functional Skills
Azure Security, Azure Advisory, Oracle Security & Advisory
Cloud security consultant/architect role focuses on designing, implementing, and managing secure cloud computing environments.
This involves assessing security risks, developing security strategies, and ensuring compliance with industry standards. They work with various cloud platforms like Azure, and Oracle Cloud to protect data, applications, and infrastructure from cyber threats.

Qualifications Skill Set
Cloud Platform Security Expertise: Azure: Defender for Cloud, Azure AD, Key Vault, NSG, Microsoft Sentinel
Identity and Access Management (IAM) : Role-based access control (RBAC), policy enforcement & Federation and SSO (OAuth, SAML, OpenID Connect).
Network Security : Virtual networks, segmentation, NACLs, Firewalls (Azure Firewall) and VPNs, VPC peering, private endpoints.
Data Protection: Encryption at rest and in transit (TLS, KMS, HSM), Data loss prevention (DLP), key management strategy & Secure storage services (S3, Blob, Cloud Storage).
Security Monitoring and Incident Response : SIEM integration (e.g., Splunk, Sentinel, QRadar), Threat detection tools (CloudTrail, GuardDuty, Security Hub) & Response playbooks and automation (SOAR).
Compliance and Governance: Frameworks: ISO 27001, NIST, CIS, HIPAA, GDPR, PCI-DSS & Cloud Governance best practices (CSPM tools: Prisma, Wiz, Check Point).
DevSecOps Integration : Security scanning in CI/CD (SAST, DAST, container scanning) & Infrastructure as Code (IaC) security (e.g., Terraform with Checkov, Open Policy Agent)
1