Public Cloud Architecture & Security Cybersecurity Consultant - M/F

With nearly 10,000 employees worldwide, we support companies in their digital transformation. We imagine and realize their ambitions through the infinite possibilities of digital platforms, to evolve their culture and way of working, and create value in their organizations.

Present in 20 countries across Europe and the Middle East and backed by 27 years of experience, we put "Technology at the service of People" to build a more human and sustainable world.

Working at Devoteam means: working alongside partners such as Google, Microsoft, AWS or Salesforce whose solutions we implement for our clients; evolving within an international group that supports your career development with tailored training and certification paths. joining a specialized team, supported by a local manager who will guide your choices and foster exchanges with your peers, whether during technical or social events. growing in a company that challenges its teams by being agile and ambitious, adapting to enable individual and collective success. Cybersecurity: why and how? In 2020, 91% of French organizations were targeted by cyberattacks, representing 1,000 billion dollars in financial losses worldwide. These considerable figures and the digitalization of our daily lives make leaders realize the major and strategic challenge that is cybersecurity. Risks are more numerous, attacks more varied, and impacts multiple. The strategy implemented to protect a company's digital assets as well as employee awareness are therefore crucial elements. By joining Devoteam's "Trust and Cybersecurity" department, you join a team of more than 700 passionate experts worldwide. You contribute to the development of a team that advises its clients on cyber, risk, resilience, network security, cloud security, encryption, audit, and security around our 5 strategic partners (AWS, Google, Microsoft, SalesForce, ServiceNow).

The Secure Network offer developed within Devoteam Cyber Trust covers multiple aspects of architecture and security of the network extended to hybrid architectures (OnPremise, Private Cloud, Public Cloud): Scalability and securing of IaaS architectures in Cloud and Multi-Cloud (Public Cloud) by design Mastery of security posture in the Cloud Container security - shiftleft security - runtime protection in a DevSecOps model Management of segmentation in Private Cloud and Public Cloud Trajectory towards a Zero-Trust architecture Transformation of security towards an "As-a-service" model - SASE Approach Transformation of the WAN towards a Software Defined model connected to an "As-a-Service" security approach Securing access to SaaS applications on a data protection model - CASB Approach Support for fine-grained segmentation / micro-segmentation models Technical, functional, and methodological consulting missions for clients regarding the design of replicable Multi-Cloud interconnection architectures (Azure, AWS, GCP, Oracle, Alibaba) adapted to the client: Audit missions of existing IAAS architectures (VPC, VNET, interconnection, security groups management, integration into the DevOps model, automation, and operational difficulties encountered by teams) Collection of client IaaS Cloud context Audit of operational processes (MCO and MCS) Market study Identification of pain-points and identification of potential players relative to the context Study of the adaptability of solutions in client operational processes Assistance in drafting specifications Mission to study security solutions in a Multi-Cloud environment: Security of the connection to the Datacenter Transit architecture security End-to-end encryption security Segmentation of zones in the Cloud: Definition of the zone segmentation model in the Cloud Identification of possible segmentation approaches (via MCNA or not) Construction of a segmented architecture based on a Nextgen FW in the Cloud (Palo-Alto, Checkpoint, Fortinet) Construction of a segmented architecture based on a native Cloud FW (AWS Firewall, Azure FW, .. )

Container and serverless security in a DevOps approach

Mission to deploy the Aviatrix solution in the client context: Design of a multi-Cloud architecture model DAT/HLD/LLD Deployment of Controller / CoPilot on AWS, Azure or GCP infra - manually or via Cloudformation template Deployment of VPC and routing management in VPCs Deployment of GW and transit infrastructure Connection of Nextgen FW via Firenet Connection of SDWAN to market solutions Connection of remote DC site via DirectConnect or ExpressRoute Automation of Aviatrix deployment via Terraform Project deliverables Client skills transfer

Mission to study and advise within the framework of mastering the security posture in the Cloud (IaaS, PaaS and SaaS) - CSPM/CWPP: What are my security needs? Which frameworks should I base myself on? What are my main risks related to the use of these Cloud services? Which data are exposed? Who can manipulate them? How to identify configuration gaps (IAM role, security groups, ACL, open services, overly permissive flows, ..) in my Public Cloud environments - CSPM solutions CSPM market study Assistance in drafting specifications / call for tender Decision support Opening towards CWPP if the client context is part of a DevSecOps or container security approach Mission to deploy CSPM solutions: Checkpoint CloudGuard Aqua Sec Classic project phases: Needs collection Architecture definition Writing DAT/HLD/LLD Definition of deployment phases Study and proposal of customized controls Adaptation of an internal security framework into technical controls Dashboard proposal Construction of the remediation process, manual or automatic, following the identification of gaps Skills transfer

How does the recruitment process at Devoteam work?

It consists of 2 to 3 interviews: Talent Acquisition Interview: the goal is to review your skills, your level of English, and validate your motivations Tech & Business Interview: this interview aims to deepen your technical skills and verify their adequacy with our needs during an exchange with a business expert Leadership Interview: it allows for the evaluation of your potential, your ambitions, and to consider your evolution within Devoteam. We prioritize at least one in-person interview. A reference check is requested and, depending on your profile, tests (technical, English, personality...) may be sent to you.

If your application is selected, we will send you a proposal presenting the hiring conditions. Upon acceptance, the employment contract is formalized.

We are looking for a Public Cloud Architecture & Security Cybersecurity Consultant: Strong Cloud networking skills (Azure or AWS or GCP) are required: AZ-900/AZ-500 or AWS Essentials Mastery of subnets, VPC/VNET, region, account, subscription, availability zone etc. concepts Knowledge of DC connection solutions specific to a CSP (DirectConnect, Express route etc..) Advanced knowledge of network architectures (Network Core, hub&spoke architecture, Core/Distribution/Access) on a Cisco-like model Good knowledge of necessary routing protocols (BGP, OSPF, HSRP,, ..) Advanced technical knowledge of a CSPM solution on the market Knowledge of the Marketplace operating model Ability to deploy and configure a VPC or VNET on at least one CSP Functional knowledge of Nextgen FWs Knowledge of native CSP transit functionalities (AWS Transit Gateway, Azure VWAN) Good notions of security in the Cloud Segmentation, Security Groups, ACL, FW components, compliance management in the Cloud Functional knowledge of CSPM solutions and main market players DevOps - DevSecOps knowledge

Master's degree (BAC +5) from an engineering school, management school, or university with a good level of English, you have at least 3 years of experience in cloud and security. If you recognize yourself in the skills below, do not hesitate to apply: Ability to conduct context collection interviews / security measurement collection / flash technical risk analysis Ability to write a study and report to a client Consulting posture towards the client (not necessarily technical expertise) Ability to take a step back from a technical subject to study functional and strategic scenarios Writing quality

Join Devoteam, you will benefit from a training plan to become a security specialist in a Cloud environment, including training and certifications. The Devoteam Group works for equal opportunity, for the merit-based promotion of its female and male employees, and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism, and excellence of our organization. All our positions are open to people with disabilities.