Skywise - Cloud Security Architect H/F

Détail du poste

Description de l'emploi:

Skywise is a leading digital services company, wholly owned by Airbus. We deliver a first-of-its-kind offer that seamlessly integrates Planning & Operations Control, Flight, Technical, and Ground Operations. By providing interoperable digital solutions for end-to-end operations, Skywise combines aircraft manufacturer expertise and digital know-how to transform operational complexity into predictable and profitable performance, ensuring resilient and more sustainable operations.

Role Summary:

The Cloud Security Architect is a key member of the Security team playing an important role in the definition, management and improvement of our cloud infrastructure and platform services. This position ensures SKYWISE's robust security position is maintained by defining, implementing and improving our cloud security strategy.

In this role, you will serve as the primary partner with the SKYWISE Data Platform Operations by defining the security architecture and tools used within our AWS platform for product landing, and other platforms for the company internal operations. In this frame you will be responsible for the identity and access definition, management and improvement ensuring a strong security posture.

Finally this position will define and maintain our cloud security link with Airbus Security Operations Center in order to ensure an efficient monitoring of SKYWISE cloud platforms.

Main Responsibilities:

Cloud Infrastructure and Platform Security

- Design and enforce enterprise cloud security baselines, landing zones and internal infrastructure perimeters across SKYWISE cloud platforms (e.g. AWS, GCP)
- Define and implement cloud native Identity and Access Management (IAM), emphasizing least privilege, short-lived service credentials, and key management infrastructure. Ensure regular reviews are performed and define improvements.
- Partner with the Cyber Security Architect to ensure our products are deployed onto secure, isolated and compliant platforms.

Infrastructure governance

- Own SKYWISE platform level of compliance to our security standards and certification for cloud security controls.
- Define security controls to ensure global monitoring of our platforms and build a strong relationship with the SKYWISE Data Platform Operations teams.

Posture Monitoring and Threat Defense

- Identify and manage our Cloud Security Posture tools to detect drift, unauthorized exposures and misconfiguration in real time.
- Define and implement the architecture rules to ensure global monitoring of our platforms to detect, manage and recover in case of security breaches.
- Be the focal point for the Airbus Security Operations Center with regards to the SKYWISE cloud platforms.

Qualified Experience / Skills / Training:

Experience & Capabilities:

- 7+ years in cyber security
- 3 or more years working experience in a cloud security architecture in a company or SaaS environment.
- Experience securing native cloud platform services (AWS, GCP, Azure)
- Advanced knowledge of cloud security controls definition (segmentation, key management,...)
- Experience in identity and access management in cloud environments.

Knowledge, Skills, Demonstrated Capabilities & Competencies:

- AWS certified security or specialty
- Certified Cloud Security Professional (CSSP)
- Strong cross functional working skills
- Ability to identify and communicate on security risks related to cloud platforms.
- Pragmatic problem solving and proactive.
- A continuous improvement mindset
- Knowledge of DevOps practices and concepts

What we Offer:

- Work-Life Balance & Flexibility
- Flexible working hours with a hybrid model (3 days per week in our Blagnac office).
- 25 annual paid leave days + Collective and individual JRTT (proportional to working time).
- A 6th week of paid leave (proportional to working time).
- Generous 12-day "family reason absence package."

- Family & Health Support
- 5 additional full-pay days for maternity, paternity, and adoption leave.
- Comprehensive Health Insurance plan.
- 3 extra paid annual leave days for employees with RQTH status.

- Financial Wellbeing & Savings
- Success sharing (intéressement) and profit sharing (participation) schemes.
- Monthly seniority bonus for all employees with 3+ years of service.
- Access to Airbus Group saving plans (PEG) including investment in Airbus shares after 3+ months of service.
- Access to a TSA (Time Saving Account)
- Collective and Mandatory Retirement Savings Plans (PERCOL and PERO).

- On-site & Other Perks
- Several catering options for lunch (canteens, food trucks, bakeries, etc.).
- Staff councils (CSE) offer various social, cultural, and sports activities/services.
- Navette (shuttle) service.

- Training and development opportunities to support your career growth

Cet emploi exige une connaissance des risques de conformité potentiels et un engagement à agir avec intégrité, comme base de la réussite, de la réputation et de la croissance durable de la société.

Unité légale:
Skywise

Type de contrat:
CDI
-----
Classe Emploi (France): Classe G14

Niveau d'expérience:
Expérimenté(e)

Famille d'emplois:
Cyber Security

En soumettant votre CV ou votre candidature, vous autorisez Airbus à utiliser et stocker des informations vous concernant à des fins de suivi de votre candidature ou de futurs emplois. Ces informations ne seront utilisées que par Airbus.
Airbus s'engage à assurer la diversité de sa main-d'oeuvre et à créer un environnement de travail inclusif. Nous accueillons toutes les candidatures, quels que soient le milieu social et culturel, l'âge, le genre, l'invalidité, l'orientation sexuelle ou les croyances religieuses des postulants.

Airbus est depuis toujours attaché à l'égalité des chances pour tous. En tant que tel, nous ne demanderons jamais aucun type d'avance de frais dans le cadre d'un processus de recrutement. Toute usurpation d'identité d'Airbus à cette fin doit être signalée à.

Chez Airbus, nous vous aidons à travailler, à vous connecter et à collaborer plus facilement et de manière plus flexible. Dans la mesure du possible, nous favorisons les modalités de travail flexibles pour stimuler la pensée innovante.