Job Summary
Job Description
What is the Opportunity?
Cloud Security Architect will be responsible for supporting public cloud adoption by providing security-focused opinions, recommendations, and know-how, while being mindful of business operations to safeguard RBC data, brand, and values. The ideal candidate will be someone who thinks differently, have strong delivery record, and hold industry-relevant qualifications in cyber security and cloud security domains.
What Will You Do?
Lead efforts to secure Azure, AWS and GCP public cloud platforms at RBC
Lead and build preventative and detective controls / measures according to RBC's cloud control objectives while using modern automation, config as code and TDD principles to bring reliability
Lead and build automated reporting and monitoring solutions to provide feedback to the developers and help them shift left and recognize security gaps early
Communicate and collaborate with application developers to remediate security vulnerabilities for their applications and / or resources
Lead, execute, and deliver on Cloud Security strategy and initiatives
Build, innovate and mature Cloud Security Capabilities at RBC
Lead the development of end-to-end technical cloud security design and architecture to ensure safe application on-boarding to meet sponsor / stakeholder needs, without impacting planned time to market timelines.
Conduct cloud service security reviews to ensure alignment with industry best practices and define security controls required for the service to operate in a safe and controlled environment
Perform threat modeling and security architecture assessments of cloud design and patterns
Work with the cloud stakeholders to design, build and validate Cloud Security controls
Ability to partner effectively with key stakeholders on complex projects with excellent communication, facilitation, and presentation skills.
What do you need to succeed?
Must Have :
5 or more years of demonstrated experience in Cyber Security.
Strong knowledge and experience of cloud security frameworks and governance practices with 3 or more years hands-on experience with Public Cloud Providers (AWS, Azure, GCP).
Experience with securing container technologies.
Familiarity with Infrastructure as Code (IaaC), tools like ARM, CloudFormation and / or Terraform.
Demonstrated experience making architectural decisions based on simplicity, industry frameworks, scalability and reusability.
Experience in hardening and safeguarding cloud services and preventing config drift with native or third-party tools (CSPM, IaaC, linter).
Nice-to-have :
Recognizable security related industry certifications (CISSP, CCSP, OSCP and other)
Azure, AWS and GCP Public cloud certifications
Kubernetes certifications (CKA, CKS)
Strong understanding and / or hands on experience with security technologies : NGFW, IPS, VPN, endpoint security, IAM, SIEM, WAF, API Security, Decryption of Web Traffic, Vulnerability Assessment, DDoS mitigation, DLP, key management, PKI, CASB, SASE.
Undergraduate degree in technical field or equivalent experience.
RBC is committed to supporting flexible work arrangements when and where available. Details to be discussed with Hiring Manager.
What's in it for you?
We thrive on the challenge to be our best, progressive thinking to keep growing and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
Leaders who support your development through coaching and managing opportunities
Ability to make a difference and lasting impact.
Work in a dynamic, collaborative, progressive, and high-performing team
A world-class training program in financial services
Flexible work / life balance options
Opportunities to do challenging work.
Opportunities to take on progressively greater accountabilities.
Opportunities to build close relationships with clients.
Access to a variety of job opportunities across business and geographies.
LI-Hybrid
LI-POST
TECHPJ
Job Skills
Amazon Web Services (AWS), Cloud Computing, Cloud Security, Cyber Security Management, Decision Making, Google Platforms, Google Programs (Inactive), Microsoft Azure, Security Architecture Design, Security Platforms, Strategic Thinking