Cloud Security Architect

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.

About the position:

The Security Architecture team handles Netskope’s security strategy and domain security architecture vision and development. We drive and synchronize security strategies aligned with technology and business priorities along with validating future directions through security research and innovation. In this role, the Cloud Security Architect will be responsible for identifying, designing, and developing leading cloud security across a broad portfolio of public cloud services and related technology systems, and the assessment of new and emerging cloud security technologies at enterprise scale. Help us protect the Cloud from the most advanced threats. As a Cloud Security Architect, you will work with product engineers designing and implementing our core platform services. This highly dynamic, hands-on role will work in-depth with our scaled, event-driven, distributed infrastructure to ensure performance and protection are evenly balanced.

Responsibilities:

• Build and leverage threat models to secure core cloud platform services

• Establish protections/requirements to enable product team usage of emergent cloud features

• Co-author next generation cloud platform designs accounting for evolving threat and product landscapes

• Describe solutions intent within the solutions associated operating environment, determine the primary systems/subsystems & their interfaces, and define functional & non-functional requirements

• Ensure solutions are fit for purpose and ensure their use by working with stakeholders, vendors/service providers, and evaluating the impact of strategic design decisions

• Contribute to the development of best practices including standardized templates

• Work with Product Managers/Owners to plan and prioritize technology focused backlog items for the architecture runway to enable business epics/features and expand into new opportunities

• Clarify the architecture for the engineering teams to support implementation and provide solutions to resolve any architectural impediments

• Perform both design and code reviews to ensure all functional & non-functional requirements for a solution are sufficiently met (e.g., security, scalability, usability, reliability, maintainability, and performance)

• Develop security patterns, standards, and architectural decision records to ensure Netskope data at rest, in motion or in use is properly secured.

• Design and develop data security architectures for cloud and cloud/hybrid-based systems.

Requirements:

• Experience designing and implementing security services/solutions which were applied to GCP, Azure, and AWS

• In-depth knowledge of cloud platforms, Linux, and security at scale

• Experience working with engineering product teams and bringing solutions to market

• Demonstrated capabilities to effectively communicate and collaborate with diverse teams

• Understanding of compliance needs and evidence collection

• Moderate ability to create scripts, perform automation, and aggregate data for analysis

• A combination of confidence and independence…with the prudence to know when to ask for help

• Demonstrates flexibility within a variety of changing situations, while working with individuals and groups.

• Minimum 10+ years of experience building and managing security infrastructure and solutions in the financial industries

• Strong ability to effectively communicate with and present to the senior leadership team

• Experience with assessment, development, implementation, integration, optimization, and documentation of a comprehensive and broad set of security technologies and processes in on premise, public, private, and hybrid cloud environments •

• Experience with Hybrid cloud architectures and designs

• Must have experience with Internet Application Hosting architectures, best practices, and related technologies to effectively protect externally facing applications

• Experience with DevSecOps process, Infrastructure as Code/Policy as Code, Container technologies (Docker, Kubernetes), API Gateways, and other common web application technologies is preferred

• Strong knowledge of enterprise security concepts/frameworks and products, secure design principles and best practices

• FedRAMP, NIST 800-53, NIST 800-190, CSA, CIS Benchmarks, ISO 27000 series, COBIT, etc.

• Good written and verbal communication skills a must.

• Must be able to design and create technical solution/process documentation quickly and succinctly

• Must be a self-starter, strong leader who is able to manage, develop and nurture a team of senior engineers and architects; work with limited supervision & be able to work well with others in a globally diverse IT (Information Technology) environment

• Understanding of cryptography as it relates to application, network, and cloud security

• CISSP, CCSP, TOGAF certification is preferred. Any other Information Security oriented certifications a plus.

• Any Cloud Security or Cloud Architecture certifications is preferred.

Education:

• Bachelor’s degree/University degree or equivalent experience preferred

#LI-NS1

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.