Trouvez votre prochaine mission ou futur job IT.

The scope includes, but is not limited to: · Contribute to the evolution of the Azure cloud security architecture vision, principles, and roadmap · Define and maintain cloud security reference architectures and reusable security patterns · Ensure security requirements are embedded in Azure landing zones, platform services, and workloads · Define and enforce cloud security guardrails, standards, and baselines across Azure environments · Provide security architecture guidance and review for cloud solution designs and platform changes · Ensure alignment with enterprise security architecture and governance standards · Define and maintain Azure security policies and control frameworks aligned with industry frameworks · Support implementation of policy as code using Azure Policy and related governance tooling · Define and oversee security exception handling and risk acceptance processes · Design and review identity and access management architectures · Define privileged access management models and administrative access controls · Enforce least privilege and zero trust principles across Azure environments · Define standards for single sign on, multi factor authentication, managed identities, and role based access control · Define and review secure Azure network architectures including segmentation and isolation models · Define ingress and egress control patterns and traffic inspection strategies · Review designs for Azure Firewall, Web Application Firewall, Private Link, DNS security, and DDoS protection · Define secure hybrid connectivity patterns and network security requirements · Define encryption standards and key management architecture options · Define data classification, data protection, and sensitive data handling requirements · Define data loss prevention controls and security requirements for data storage and processing · Review backup, recovery, and data sovereignty requirements from a security perspective · Define secure Azure landing zone architecture patterns and platform security baselines · Define platform hardening standards and configuration management requirements · Ensure security logging, monitoring, and auditability requirements are embedded in platform design · Define secure configuration standards for core Azure platform services · Define security requirements for Infrastructure as Code and cloud automation approaches · Review Terraform and CI/CD designs from a security and governance perspective · Define security testing requirements including dependency scanning, container scanning, and IaC scanning · Promote shift left security practices across platform and application teams · Conduct cloud security architecture risk assessments and provide mitigation guidance · Support internal and external audit and compliance activities · Map cloud security controls to regulatory and industry frameworks · Define compensating controls where required · Support continuous compliance and security posture improvement initiatives · Collaborate with cloud architecture, platform engineering, security, and operations teams to ensure consistent security implementation · Produce architectural documentation, security design decisions, and governance artefacts.

Contexte de la mission Dans le cadre d’un programme de transformation digitale et de migration vers le cloud (“Move to Cloud”), nous recherchons un(e) Architecte Cyber Cloud Azure afin d’accompagner la définition et la sécurisation de l’architecture cible sur Microsoft Azure. La mission s’inscrit dans un environnement hybride avec des enjeux forts autour de la sécurité, de la conformité, de la gouvernance cloud et de la sécurisation des workloads migrés vers Azure. Missions principales Définir l’architecture sécurité cible dans un contexte de migration vers Microsoft Azure Accompagner les projets Move to Cloud sur les volets cybersécurité et conformité Concevoir et mettre en œuvre les standards de sécurité cloud Azure Réaliser les analyses de risques et les revues d’architecture sécurité Définir les patterns de sécurisation des infrastructures et applications cloud Participer à la gouvernance sécurité du cloud : IAM / RBAC segmentation réseau chiffrement gestion des secrets logging & monitoring Zero Trust Mettre en place et maintenir les solutions de sécurité Azure : Microsoft Defender for Cloud Microsoft Sentinel Azure Policy Key Vault Entra ID Accompagner les équipes infrastructure, réseau, DevOps et applicatives Contribuer à l’industrialisation et à l’automatisation des contrôles sécurité Participer à la rédaction des standards, procédures et documentations techniques