Cloud Security Architect ‏ (d/f/m)

at  henkel

At Henkel, you can build on a strong legacy and leading positions in both industrial and consumer businesses to reimagine and improve life every day. If you love challenging the status quo, join our community of 47.000 pioneers around the globe. The teams in our corporate functions enable the best in our dynamic businesses and in our people to maximize our company’s potential. With our leading brands, our cutting-edge technologies and our disruptive solutions, you will have countless opportunities to explore new paths and develop your skills. Grow within our future-led businesses, our diverse and vibrant culture and find a place where you simply belong. All to leave your mark for more sustainable growth.
Dare to make an impact?

YOUR SKILLS

• Degree in Computer Science, Information Security or a comparable qualification
• 7+ years of professional experience in the field of cloud security
• Expertise in the design and implementation via code of security concepts (e.g. organization policies) for cloud platforms (GCP and OpenShift is a must, Azure and Alibaba is preferable)
• Expertise in setting up and managing CNAPP solutions
• Expertise in ASPM (Application Security Posture Management) and DevSecOps is a plus
• Advanced Kubernetes and Terraform coding skills
• Good knowledge of network security, identity and privilege access management, landing zone concepts for cloud platforms (Azure, GCP, Alibaba, Openshift) and usage of project factories for complete cloud landing zone set-up via code
• Good communication skills in English
  At Henkel, we come from a broad range of backgrounds, perspectives, and life experiences. We believe the uniqueness of all our employees is the power in us. Become part of the team and bring your uniqueness to us! We welcome all applications across different genders, origins, cultures, religions, sexual orientations, disabilities, and generations.

• Create and Implement via Terraform security concepts and architectures in various cloud environments (GCP, Azure, Alibaba, OpenShift), with focus on GCP
• Conduct security assessments and risk analyses of cloud infrastructures and work with internal teams to ensure optimal security solutions
• Identify cloud security gaps and develop risk mitigation measures, predominantly via code
• Enforce security guard-rails (policy restrictions) in cloud environments via code
• Monitor CNAPP (CSPM, CIEM, CWPP) cloud security risks and address them accordingly for resolution
• Develop and enforce whenever possible