AWS/Cloud Security Architect

Skills

They have a couple of items from an Accenture Cloud Security Governance Assessment and they gave EMC a book of things they recommended. #1 item is to develop a cloud dev security strategy. They’ve split this into 3 different buckets of: 1. Do now 2. Do next 3. Do later. Wants this person to get familiar with that and what they are doing to remediate those issues and focus on what they need to put together from a Cloud Security Strategy perspective. Is it: 1. Using existing policy is it updating that? 2. Is it creating a new Cloud Security policy or some other document they can create and evangelize? At the end of this Ben wants an official document whether it is a policy set of standards an approach and have something they can get in front of engineers and say this is what we do with Cloud Security at EMC. If the person can do this in 3-6 months and got that knocked out that would be a success. On this path last year was more of a ground zero and now they are at like level 1.

Description

AWS security architecture skills and this would be the first top need. AWS CLOUD SECURITY
Followed by any other Security Architecture experience would be great from a consultant standpoint and going forward in that ballpark.
Implementing Cloud Security and building the structure around it.
Within cloud security the toughest piece is the Identity piece and there will be some work with Privileged Access Management – PAM has had fits and starts with what is our go forward strategy with PAM and it has hit a roadblock here and there.
Looking for someone who is willing to step up and put a stake in the ground with what they should do and where they should go.

Soft skills

A good personality and is open to talking and skillets of being able to persuade effectively and influence without authority.
This will help Ben to make the arguments either for or against something. Not that they are against each other but one might say we should consolidate on this technology and one might say we should go best of breed. SO, someone with the expertise to help facilitate the why they would want to go a certain direction would be helpful in conjunction with the overall solution architecture that Jason Henson would be doing.
Right personality to work with strong willed leaders, that has been an architect before so an ability to roll with it.
Can this person set aside enough of an ego in discussions to crack the code with the people they are interfacing with and the minute someone gets frustrated, not to kill the conversation. There is a finesse to it. Going from mapper to the cloud.

Responsibilities

• From an IAM standpoint it would be good to have some skillset there
• Traditional security engineering, if this person has had experience on the engineering side that would be good.
• One thing he is working on and getting his head wrapped around is an overall strategy he has been working on is looking at the technology roadmap over the next 3-some odd years and helping with that.
• So, this would be low on the needs/skills but fantastic if the candidate has it: Security Architecture experience and helping him to build out some of the documentation.
• The Documentation is still new and building the documentations for the role/helping to build out the role itself within EMC.
• He has stuff that they have worked on, and it would be good to have someone with experience building the documentation.
• For example, this is what a Security Architect does (helpful b/c all 3 of his leaders have a different expectation of what he thinks they are looking for).
• If he/she has one of those top skills they can work through the rest.