IT Security Solution Architect > London > Joboolo FR :
Société : Boston Consulting Group Lieu : London England
WHAT YOU'LL DOThe IT Architect provides consulting expertise and thought leadership for the internal BCG Secure Identity and Data program.
The IT Architect provides technical consulting for secure identity and data architecture, design, and strategy; and is responsible for assisting with technical implementation and product integration for solutions across hybrid on-premises, multi-cloud and SaaS ecosystems, and influencing engineering decisions and outcomes that drive business success.
The IT Architect ensures the digital applications, tools, and services protect our data, our clients’ data, and our intellectual property; are resilient to cyber-attack; meet BCG policy and standards, regulatory requirements, and industry best practices; while using a risk-based approach to meeting BCG business needs and objectives.
The IT Architect works with teams inside BCG to secure enterprise information by determining identity, access, and security requirements, planning, implementing, testing, and supporting secure systems, participating in IT projects as a Subject Matter Expert, preparing security standards, policies and procedures, and mentoring team members.YOU'RE GOOD ATDetermining requirements by evaluating business strategies and requirements, implementing information security standards, conducting system and vulnerability analyses and risk assessments, recommending secure architecture aligned to business architecture, and identifying/driving remediation of integration issues.Support implementation, maintenance, and troubleshooting of Information Protection issues notably for CASB, DLP, AIP, and related services.Researching and analyzing emerging technologies, designing, and advocating new technologies, architectures, and IAM products in collaboration with system and service owners.Providing expert knowledge of solution/application architecture for identity related capabilities as well as methodologies in the software development life cycle.Managing end to end delivery of projects with hands on involvement in the development and configuration of products around data and identity services.Maintaining security data and identity principles by ensuring compliance to standards, policies, regulatory requirements, and good industry practices are achieved.Self-managing progress and status of tasks and deliverables on projects and escalating issues and risks timely.Interacting with stakeholders and possessing the ability to influence direction, articulate risks and advocate for solutions and roadmaps.Completing market assessments on vendor products, packages, and services; guiding tests and implementation of products solving enterprise information security requirements.Suggesting and implementing alternative mitigations/compensating controls to allow for business to continue while protecting BCG's assets.Guiding the configuration, implementation, monitoring, and support for software and systems with identity and access management solutions that will help ensure compliance with regulatory, industry, and corporate policies and procedures.Partnering with cross functional teams to ensure compliance to industry and company standards including ISO 27001, SOC2, NIST, GDPR, and DPO standards.Subject Matter Expert and security domain participant for overall enterprise architecture and squad related technology.Updating job knowledge by tracking and understanding emerging practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.Vendor escalations and Major Incident Management support for business critical services.Experience driving the adoption of secrets management best practices including certificates, API tokens, Kubernetes, database credentials, SSH keys etcYOU BRING (EXPERIENCE & QUALIFICATIONS)Bachelor’s degree (or equivalent)10+ years’ experience working with Microsoft Active Directory and Azure Active Directory7+ years’ experience working with AWS, GCP, Azure, or Alibaba cloudUnderstanding of API concepts and RESTful servicesUnderstanding of cloud security, zero trust, risk-based authentication, and multi-factor authentication (MFA) solutionsHands-on/direct experience integrating web, single-page, native applications through API endpoints, API services for machine-to-machine authenticationRelated certifications ( Security Plus, CISSP, CCSP, ITIL Foundations, CE+, etc)Experience with Information Rights Management solutions (AIP)Experience with Cloud Access Security Brokers (CASB) and Data Loss Prevention (DLP) services across the Hybrid CloudKnowledge of Data Classification concepts and strategiesExperience working in Agile, knowledge of Jira, Jira Align, Miro, and related tools and principalsExperience as a change management practitioner using industry best practices and ServiceNow tooling and workflowsKnowledge and experience with automating solutions using one or more languages ( , Python, PowerShell, Terraform, or similar)Expert knowledge in Secrets Management, preferably using HashiCorp VaultExperience building CI/CD orchestration pipelines based on Github and Github ActionsYOU'LL WORK WITHYou will work in a fast-paced, intellectually intense, service-oriented environment to interpret rules and guidelines flexibly to enhance the business and in keeping with BCG’s values and culture.
You will be a part of a team of professionals in support of internal IT, business professionals, and consultants delivering business and management strategy to our clients.
You will work with enterprise architects, IT and business professionals, application developers, and analysts providing capabilities, tools, and support for our consultants.
You will be an integral part of the BCG Identity & Access Management team in delivering Information Technology for all of BCG. BostonConsultingGroup LondonEngland
