IoT Security Architect (offline)

As an IoT Security Architect, you will be leading the planning, design, and engineering of enterprise-level infrastructure and platforms related to cloud security. You will perform technical planning, architecture development, and modification of specifications for IoT environments (Cloud, Embedded, Linux).

We are looking for individuals who are passionate about HW and SW security, have the ability and desire to architect, implement and validate state-of-the-art IoT product security solutions leading multiple technical teams during implementation. Successful candidates will have excellent written and oral communication skills in English; will be comfortable explaining technical concepts to a wide range of audiences, including senior leadership, and has a deep understanding of modern security practices, tools, and approaches.

Requirements:
- Bachelor’s Degree in Computer Science or equivalent related experience
- 3 years architecting, designing, building cloud services in the IoT domain
- 5-10 years of IT experience
- Heavy security experience across cloud architecture deployments, governance, and general cloud security controls
- Deep experience with embedded software development and architectures, security protocols, applied cryptography (Symmetric and public-key cryptography), and security standards
- Knowledge of a variety of ways of testing for products security (entropy testing, penetration testing, side-channel attacks, various cryptanalysis techniques, etc)
- Lead the improvement of governance, compliance, and quality assurance across embedded and cloud security architectures supporting vertical and horizontal business units
- Full knowledge of information risk management frameworks, regulations, data protection guidelines, and standard
- Ensure that embedded and cloud solutions follow security and compliance controls
- Expert in cloud and security tools, processes, and implementation
- Understanding of network design principles with knowledge of virtualized environments and implementation of security controls in a virtual infrastructure
- Experience with one or more security frameworks – Cloud Security Alliance, PCI DSS, Assurance Registry from the Cloud Security Alliance
- Practical experience in AWS or other cloud platforms
- Some experience with cloud software design patterns (micro-services, containers, FaaS, NoSQL)
- Developer background, 2 years of experience with programming in at least one programming language (Java, C#, C++, Python, etc.)
- Some experience with continuous integration concepts and tools, such as Jenkins, Microsoft DevOps, Terraform, Foundations, etc.
- Knowledge of the emerging cloud technologies and ecosystem and how to integrate with it
- Bonus point for experience with IoT or connected devices
- Ability to adapt to changing requirements and priorities
- Good analytical and organizational skills within multinational/distributed teams
- Good verbal and written communication skills

Nice to Have:
- Industry recognized and vendor-specific cloud security certifications preferred
- Security Certifications – CCSK (Cloud Security Alliance) / CISSP / CCSP
- DevOps concepts and strategies
- Experience architecting cloud foundational capabilities for AWS for large enterprises

Job Responsibilities:
- Establish core enterprise architecture principles, patterns, policies, and decisions for product security (Embedded and cloud platform). Drive the adoption of the principles across the distributed teams
- Determining the correct level of product security for a product and market
- Analyzing and recommending architectures for security product implementation
- Ensure that product solutions (Embedded and cloud platform) follow security, compliance controls, and conformance to the company IT security standards
- Communicating architecture decisions throughout the organization and ensuring that implementations meet security requirements
- Knowledge with modern cloud computing platforms such as FaaS and Containers; Open Source software frameworks such as Hadoop and Sparks; NoSQL databases; and ML
- Evaluate security solutions and tools
- Present and communicate to the senior leadership

About JatApp

JatApp — IT компанія, яка створює масові, корисні та високотехнологічні продукти, якими щодня користуються мільйони юзерів зі всього світу.

Наше портфоліо налічує 18 продуктів у нішах: бізнес, утиліти, лайфстайл, кібербезпека, книги та освіта. Кожного місяця нашими продуктами користується понад 20 млн юзерів.

Ми пропонуємо:
- Гнучкий графік та формат роботи: можливість працювати віддалено або з офісу/коворкінгу
- Комфортний офіс в Києві, який має укриття, забезпечений Starlink, Ecoflow та генераторами для безперебійної роботи
- Компенсацію оренди коворкінгу за межами Києва
- Медичне страхування та компенсацію на заняття спортом після завершення випробувального терміну
- 20 робочих днів оплачуваної відпустки на рік, необмежену кількість оплачуваних лікарняних, 5 днів лікарняних без довідки та додаткові вихідні для важливих життєвих подій
- Компенсація навчання з професійного розвитку, участі у конференціях, мітапах та курсів англійської мови — по завершенню випробного терміну
- Доступ до бібліотеки знань: корпоративних курсів та книжок
- Неформальні події, тімбілдінги, подарунки на свята, річниці роботи та день народження
- Відкриту та дружню корпоративну культуру, де пропозиції кожного вітаються та заохочуються!

Company website:
https://jatapp.biz/ua/

DOU company page:
https://jobs.dou.ua/companies/jatapp/