Senior CloudOps Engineer - Cybersecurity Architect

at  Thales

A Joint Venture between Thales (67%) and Leonardo (33%), Thales Alenia Space is a global space manufacturer delivering, for more than 40 years, high-tech solutions for telecommunications, navigation, Earth Observation, environmental management, exploration, science and orbital infrastructures. Thanks to our diversity of skills, talents and cultures, our customers (governments, institutions, space agencies, telecommunications operators), therefore have Space to Connect, Secure & Defend, Observe & Protect, Explore, Travel & Navigate.

WHO WE ARE

You just found your job destination! At Thales Alenia Space, we believe in space as a new horizon to build a more sustainable Life on Earth. Space-based solutions contribute to connecting people, bridging the digital divide, navigating efficiently and monitoring our planet. If you are willing to work on stunning space programs for a leading satellite manufacturer, Thales Alenia Space, just don’t hesitate and apply on-line now!
We have numerous positions available in Thales Alenia Space’s Digital Competence Centre in Luxembourg. Based in Belval (Esch), Thales Alenia Space in Luxembourg develops state-of-the-art digital solutions, using big data, artificial intelligence and cybersecurity technologies to address complex end-to-end space systems’ challenges.
We are currently looking for a Senior CloudOps Engineer - Cybersecurity Architect.

ABOUT YOU

We are looking for an engineer with significant experience working on complex software systems and big data. Specifically, you should have:

• At least 7 years of hands-on experience with distributed software systems.
• Strong understanding of security best practices and their application to distributed environments including network and user access.
• Expertise in cybersecurity with the ability to implement robust solutions to protect cloud infrastructure and data from threats.
• Experience in conducting regular security assessments, vulnerability scans, and penetration tests to identify and mitigate risks.
• Understanding of data encryption techniques for data at rest and in transit.
• A good experience with Platform as a Service (PaaS) and Kubernetes as a Service (KaaS) technologies with a DevOps perspective.
• Knowledge of packaging, deployment, configuration, monitoring, and administration of several of the products including:
• IaC tools like Terraform, Ansible,
• Monitoring tools like Prometheus, Grafana, ELK, Thanos,
• Security and IAM tools like Keycloak, Red Hat IPA, Vault, Trivy, NeuVector, OpenSSH, OpenSCAP,
• Databases like MinIO, PostgreSQL, ElasticSearch, MongoDB, Cassandra, Redis,
• Cloud services like Microsoft Azure,
• VCS and Continuous delivery tools like Gitlab, Argo CD/Workflows,
• Others: Gitlab, Tyk API GW, WSO2.
• Linux systems administration skills (Ubuntu / RedHat).
• Programming and scripting knowledge in Python, Bash
• Proficiency with Git (source code management), Scrum or Kanban frameworks and tools like JIRA.
• A solid understanding of the fundamental processes of ITIL.
• Familiarity with Test-Driven Development (TDD) and Behavior-Driven Development (BDD) practices, appropriate linters and static code analysis tools for each language.
• Ability to write clear technical documentation and manage the use of wikis or documentation platforms like Confluence.
• Ability to lead cybersecurity discussions, make strategic technical decisions, and guide the development team.
• Strong communication proficiency in English for effective cross-functional collaboration.
• Analytical skills to troubleshoot complex technical issues and provide innovative solutions.
• Understanding of project lifecycle management and ability to coordinate with stakeholders.
• Commitment to staying updated with the latest advancements in cloud computing, cybersecurity and related technologies.

Additional skills and experience in any of the following topics would be highly valued:

• Hands on experience with virtualization and IaaS technologies (e.g. OpenStack, VMWare ESx, Harvester/Kubvirt).
• DB Administration and Operations experience.
• Programming experience in Go, Rust.
• Proficiency with WebAssembly (SpinKube, WASM Cloud, WASM Runtime), Machine Learning (ONNX)
• Familiarity with industry regulations such as aerospace-specific compliance requirements.
• Experience in mentoring junior developers and fostering professional growth.
• Working proficiency in French.

We are looking for skilled and ambitious people as we continue to build up our team and create a positive, diverse, and collaborative work environment. If this role sounds interesting to you, don’t hesitate to reach out to us and learn more!

• Design and Implement Cloud Infrastructure: Develop and maintain scalable, secure, and highly available cloud architectures to support space-based applications and services.
• Cloud Operations Management: Manage cloud operations to ensure high availability, scalability, and performance of services. Automate cloud deployment, monitoring, and management processes using Infrastructure as Code (IaC) and DevOps tools.
• DevSecOps Integration: Integrate security practices into the software development lifecycle (SDLC) and DevOps workflows. Collaborate with development and operations teams to implement continuous security monitoring and testing.
• Cybersecurity Engineering: Define, estimate and implement robust cybersecurity measures to protect cloud infrastructure and data from threats. Conduct security assessments, analyze vulnerabilities (priority, solutions), and conduct penetration tests to identify and remediate vulnerabilities.
• Compliance and Regulatory Adherence: Manage the compliance to industry standards and regulations such as ISO 270XX, CIS, NIST-800, GDPR.
• Cybersecurity Management: Define and monitor project security policies, procedures, and best practices and collaborate at organization level to establish a strong cyber community of practice.
• Collaboration and Leadership: Work closely with cross-functional teams—including software development, network engineering, and IT security—to integrate cloud and cybersecurity solutions effectively. Provide technical leadership and mentorship to junior engineers and team members, fostering a culture of innovation and continuous improvement.
• Incident Response and Recovery: Lead incident response efforts for cloud infrastructure and security incidents, ensuring rapid resolution and minimal impact. Participate in the definition and implementation of the disaster recovery and business continuity plans related to cloud operations.
• Strategic Planning and Innovation: Drive innovation by keeping up with emerging technologies and trends in cloud computing and cybersecurity. Contribute to the strategic planning of cloud infrastructure and cybersecurity roadmaps aligned with business objectives.
• Documentation and Reporting: Maintain comprehensive documentation of cloud architectures, security frameworks, and operational procedures. Prepare and present reports on system performance, security incidents, and compliance status to senior management.
• Risk Management: Identify potential risks in cloud operations and cybersecurity, developing mitigation strategies accordingly. Implement monitoring tools to proactively detect and address issues.
• Customer and Stakeholder Engagement: Collaborate with customers and stakeholders to understand requirements and translate them into technical solutions. Provide expert guidance on cloud and cybersecurity matters during project proposals and reviews