Cloud Security Architect

Description Position at Wind River CLOUD SECURITY ARCHITECT Location: Canada, Remote Security Clearance Requirements WHY WIND RIVER? Wind River is on a mission to transform the world through groundbreaking technology, making it safer and more connected than ever before. With over four decades of expertise, Wind River is at the forefront of delivering software solutions for mission-critical intelligent systems across various industries. Our vision is to empower billions of devices, ensuring the highest levels of security, safety, and reliability, whether it's making autonomous driving possible, protecting those who serve and powering space exploration, enabling 5G connectivity, enhancing healthcare systems, or allowing companies to make the products that matter, faster. It's Who We Are To achieve this ambitious goal, our dedicated team at Wind River works tirelessly to pioneer solutions that redefine what's possible in the tech industry. We pride ourselves on our culture of innovation, collaboration, and inclusivity. With a commitment to diversity, equity, inclusion, and belonging, we foster an environment free of discrimination and harassment where employees are encouraged to think outside the box and challenge the status quo. All of our employment decisions are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, national, social, or ethnic origin, age, physical, mental, or sensory disability, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, HIV status, family medical history or genetic information, family or parental status including pregnancy, or any other status protected by the laws or regulations in the locations where we operate. It’s Who You Are As a Security Architect at Wind River, you will play a pivotal role in our mission. You’ll work closely with Product Engineering, Software Development, QA, and our customer-facing teams to drive requisite levels of infrastructure, applications, and software security. Innovation, collaboration, and teamwork are key, as you'll actively lead global projects, working with colleagues from around the world. Your responsibilities will span from architecting secure by-design hybrid infrastructure and security controls implementation for cloud-native solutions. To succeed in this role, you should have a minimum of 14 years of IT security experience, be proficient in public cloud management leveraging IAC, possess a strong understanding of DevSecOps technologies, pioneering new security controls, and possess relevant experience in cybersecurity principles and trends with a desire to increase knowledge and strong analytical skills. A proactive mindset, solid problem-solving and technical skills, and the ability to lead engineers, as well as, work autonomously are essential. It’s What You Know

• Expertise with Industry standards and frameworks such as NIST SP 800-53, FEDRAMP, OWASP, SSDF and Security Technical Implement Guides (STIGs) and bringing components into compliance.
• Deep understanding and hands-on experience in AWS and Azure native services
• Architect Public Cloud (AWS, Azure etc.) and Hybrid environments
• Secure OnPrem and Public Cloud environments with policy as code
• Designing and implementing Application, Network, Back-end security
• Solid experience in SAST, DAST, container and cluster hardening
• Strong foundation of DevSecOps principles and implementations including Kubernetes, Docker, Harbor, Infrastructure as Code including Terraform and Helm
• Very good understanding of security tools Coverity, BurpSuite, Trivy, PRISMA, Tenable, DockerBench, KubeBench, Splunk etc.
• Good understanding of application security
• Programming skills and proficiency in automation leveraging Gitlab, Jenkins, Jira, Python
• Strong foundation of vulnerability management, remediation, and troubleshooting skills
• Proactive, data-driven and adaptable with a willingness to explore and learn.
• Self-managed, fast learner, and strong problem-solving skills.
• Excellent verbal and written communication skills and a good listener.
• Ability to brainstorm and represent competing ideas simultaneously.

It’s What We Offer You

• Hybrid work model for workplace flexibility
• Comprehensive health, dental, and life insurance
• Short and long-term disability coverage
• RRSP matching for financial security
• Flexible time-off policies for work-life balance
• Employee assistance program for mental well-being
• Learning benefits, including a LinkedIn Learning subscription and seminars

Join us at Wind River, where we're not just shaping technology; we're shaping the future of a safer, more connected world. Your journey to make a meaningful impact begins here. Security Clearance Requirements Successful candidates must engage in a security clearance process in regards to their citizenship in order to perform fundamental job duties, as per applicable law. In particular, candidates with certain citizenship may not be able to perform such fundamental job duties. Currently, this includes citizens of the following countries: Belarus; Burma; China; Cuba; Iran; North Korea; Syria; Venezuela; Afghanistan; Cambodia; Central African Republic; Cyprus; Democratic Republic of Congo; Ethiopia; Eritrea; Haiti; Iraq; Lebanon; Libya; Russia; Somalia; South Sudan; Sudan; Zimbabwe. The security clearance process may take a significant amount of time to complete, and any offer of employment will be contingent on the candidate's legal ability to perform the fundamental job duties. Wind River is committed to meeting its obligations to candidates under applicable human rights law and privacy law in this regard. Applicant Privacy Notice Your privacy is of the utmost importance to us. At Wind River, we strictly adhere to all applicable data privacy laws. Please review Wind River's Applicant Privacy Notice, which can be found here. LI-GB1 LI-Remote