Cloud infrastructure security architect

Reporting to the Director of IT Security Services, the Cloud Infrastructure Security Architect's mission is to develop and direct the security architecture methodology related to business, compliance, risk management, and compliance with Cogeco's security management framework. He designs and implements the security architecture model for cloud services and infrastructure as well as the roadmap. He provides directives and writes security standards, actively contributes to securing project deliverables and acts as an expert in solving technical challenges.

Among your main contributions architect profile.
Define, design and implement the practice of security architectures for cloud services and infrastructures
Set up architecture patterns to secure cloud services and infrastructure 'by design'
Work closely with security officers in subsidiaries and business units
Contribute to securing the company's business projects in a dynamic and constructive way
Identify weaknesses, potential vulnerabilities and risks in collaboration with the Risk and Governance Department of CCSD (Corporate Cyber ​​Security Department)
Secure cloud services and infrastructure according to the risks identified and the security requirements mentioned in the security documents
Analyze and evaluate requests for exceptions to security requirements, propose mitigating measures if required
Design architectures offering strong resilience to technological threats
Ensure that contributions are made in accordance with Cogeco's security management framework, approved documentation standards and security standards (NIST CSF, NIST 800, CIS Benchmark, ITIL, FAIR)
Design SMART security solutions (Specific, Measurable, Achievable, Realistic, Temporarily defined)
Harmonize and standardize the security of cloud services and infrastructures across all business units
Identify and map the cloud services and infrastructures used by the systems and keep them up to date over time
Work in close collaboration with domain experts and operational security teams
Actively contribute to the development of security policies and standards
Contribute to the Safety Roadmap
Act as an expert in the resolution and analysis of security incidents involving cloud services and infrastructure
Manage escalations in accordance with the issue resolution process
Ensure compliance with planning and the quality of architecture deliverables
Identify potential challenges and propose solutions collaboratively
Collaborate with the Vice-President of Internal Audit on a regular basis
Collaborate in the design and improvement of contribution processes
Ensure customer satisfaction for each contribution
Ensure constant collaboration with operational security teams and that of the CCSD
Provide activity reporting on a weekly basis
Support management decisions and the strategic security plan
Do you have these skills?
Experience in architecture in Google CLoud Platform or Azur Cloud environments
Experience in I&O (virtualization)
Experience in the security of cloud services and infrastructures (IAAS, PAAS, SAAS)
Experience in security architecture (networks, system, access, Information)
Experience in securing information flows (Collect, Ingest, Store, Process, Analyze, Visualize)
Experience in isolation and micro segmentation (physical and virtual)
Experience in Serverless Architecture
Experience in managing authentication certificates
Experience in systems and process automation
Experience in securing data warehouses
Experience in managing secure data in transit
Experience in designing monitoring systems
Strong knowledge of the GCP Platform & Apps environment (Compute, Identity & Security, Networking, Big Data, Storage & Database, Machine Learning)
Strong knowledge of Identity and Access Management principles
Knowledge of the functional principles of Machine Learning (ML) and Artificial Intelligence (AI)
Strong knowledge of security standards (NIST CSF, NIST Series 800, FAIR, CIS Benchmark, ITIL)
Knowledge of applicable legal and regulatory environments (Protection of personal information, Regulation of listed companies (52-109), Protection of Telecoms infrastructures)
Good interpersonal skills, communication and organization
Strong analytical and planning capacity
Strong ability to understand business needs and potential security and compliance issues
Strong ability to establish good working relationships with others and work as a team.
Ability to exercise judgment and discretion with confidential information
Experience in coordinating multiple projects
Experience in tender management (RFI / RFP / RFQ)
Excellent ability to write security operation documents and processes (FR / EN)
Strong ability to multitask and efficiently in a fast and demanding environment
Ability to manage complex technical and / or interpersonal problems
Ability to be creative in resolving issues
Good oral and written communication skills
Bilingual French / English
Does this profile look like yours? We want you on our team!
Recognized Bachelor, Diploma or Certificate in Computer Security
CCSP, CISSP, TOGAF, ITIL certification is a plus
10 years of IT experience including 5 years in IT security
5 years of experience in security architecture
Cloud infrastructure security experience (Azur or Google) an asset
5 years of experience in the use and implementation of at least 4 of the following tools: SIEM, IDP / IPS, Windows, Unix, CISCO
 Why join Cogeco?
Cogeco is a major player in the telecommunications market and offers all of its employees a stimulating, dynamic and diverse work environment based on respect and collaboration. We believe in continuing education and provide our employees with professional development and internal growth opportunities.

At Cogeco, diversity is an essential asset to our organizational performance. We are committed to providing equal opportunities to all individuals, regardless of cultural and individual differences. We do everything in our power to compose teams that reflect the diverse profiles and origins of our clients because we firmly believe that this contributes to our signature of excellence.

IT DECISION SUPPORT SYSTEMS

Training aims
The decision system is intended to facilitate decision-making at the enterprise level. Today, mainly used in important fields such as finance, medicine, IT or even politics, decision support in Morocco is starting to see an increase which is getting stronger from year to year.

The objective of this training is to enable students to acquire skills in the design and implementation of decision support computer systems.

Opportunities
The computer science graduate of the Computer Support Decision Support option will be recruited for the following positions: Information security job description

Database administrator
Designer designer SIAD
SIAD Analyst and Designer
SIAD Consultant and / or SIAD Project Manager
Training managers
For more information please contact:

Center I S GA Rabat: M. HARCHI Said
Center I S GA Casablanca: M. Nabil CHERKAOUI
Center I S GA Marrakech: M. Yassine SAFSOUF
Center I S GA Fès: M. Rachid NAOUAL
Center I S GA ElJadida: Mr. Sabri Yassine
Programs
1st YEAR2nd YEAR3rd YEAR4th YEAR5th YEAR
1st YEAR
Semester 1:
Culture and communication
English
Algebra
Analysis
Boole algebra
Combinatorial logic
Algorithmic
Matlab programming
Mini projects
Semester 2:
Culture and communication
English
Analysis
Algebra
Electrical circuits
Sequential logic
Algorithmic
Programming C
Mini projects
Optional internship

Cybersecurity architect

WHAT WE CAN ACHIEVE TOGETHER:
Within the Information Systems Service of Thales Defense Mission Systems (DMS) of Thales in Elancourt, you will have to define and maintain during their life cycles architectural solutions in coherence with the designs of Enterprise architectures by piloting agile (scrum) or "traditional" projects.

In a more "conventional" framework and for the areas of your expertise (Cyber-security, IT) you will intervene on specific activities (incidents, support, technical advice to business, ...) as an Architect Solutions (F / H).

By joining us, you will be entrusted in particular with the following missions: Network architecture job description

Define and maintain the architecture of the solution in coherence with the design of enterprise architecture and Business requirements / contributions

Guarantee the performance, integration, implementation and security maintenance of the solutions implemented

Bring your expertise and provide guidance on technical architecture issues, technological solutions

Share your experience and exchange within communities, working group on your areas of expertise and your activity

Innovation, passion, ambition: join Thales and create the world of tomorrow, today.

Required profile :

WHO ARE YOU ?
Higher education (Engineering School), you justify a first successful technical experience in one or more areas of IS / IT and Security?

Do you have a good command of project management and Agile methodology and ceremonies (Scrum)?

Do you have in-depth knowledge of all or part of the areas covered by the Infra and Cyber-Security Domain (Cyber, Windows OS, Unix, Linux, LAN / WAN, Telephony, BD, etc.)?

French 5G market seriously clouded for Huawei

The National Agency for Security of Computer Systems (Anssi) has indicated that Huawei will not be "completely banned" in France. The Chinese group's partner operators will nevertheless receive operating authorizations limited to eight years.
The future of the Chinese telecoms giant Huawei on the French 5G market has been seriously clouded: the national agency responsible for IT security has announced that it will severely restrict the operating authorizations of the French operators who are partners of the group , effectively compromising the latter's access to the French market.

Huawei will not be subject to a "total ban" but the French operators using it will, at best, receive operating authorizations limited to eight years, according to the National Information System Security Agency (Anssi).

 "What I can say is that there will not be a total ban. Operators who do not use Huawei, we encourage them not to go because it is a bit the natural sense of things Those who already use it, we issue authorizations whose duration varies between three and eight years ", said Guillaume Poupard, the director general of Anssi, charged by the government with examining this file, in an interview with economic daily Les Echos.

"There will be refusals"
"The decisions are ready," said Guillaume Poupard, confirming information from AFP on Tuesday that these decisions are just waiting to be signed by the executive. Only three telecom equipment manufacturers, European Nokia and Ericsson and Chinese Huawei, are able to supply the equipment for the future 5G networks, the future mobile telecommunications system. "There will be refusals," said Guillaume Poupard to Les Echos , however excluding that these refusals concern Nokia and Ericsson, and thus indicating in hollow that only Huawei is concerned.

These decisions, which go far beyond the simple industrial aspect, come against the backdrop of persistent diplomatic tensions between Washington and Beijing: the United States is indeed pressuring its allies to ban Huawei for security reasons, citing its proximity to the Chinese government. The company has always denied these allegations. Anyway, the issue is particularly important in France for operators SFR (Altice) and Bouygues Telecom who already use Huawei antennas in their 4G networks and want to rely on it to deploy 5G.

Operators want compensation senior systems architect job description
While Arcep, the telecoms regulator, has set auctions for the allocation of new frequencies in September and the first commercial offers could be available in France before the end of the year, the two operators are worried about having to change equipment manufacturers, or even dismantle their old equipment in the event of incompatibility.

They warned that they will ask for compensation if the state blocks the way for the Chinese group. "What we are doing on 5G in France is a compromise. We must develop 5G under acceptable economic conditions for telecoms operators and also sovereign operators, which allow us not to be dependent on such and such equipment or country ", tried to clear the director of Anssi.

"Many of the antennas installed are compatible with 5G", he reacted in particular about the dissuasive nature of these restrictions, given the amount to be invested for operators. "We are not in Huawei bashing, nor in anti-Chinese racism," assured Guillaume Poupard.

"We are in risk management. Not all telecom equipment manufacturers are created equal. I am not mentioning a name, but it is clear that we are not in the same risks when we talk about Chinese or American equipment We are cautious with non-European equipment manufacturers, obviously, just as we would also be, for example, if all operators used the same equipment manufacturer, even if he was French - that would be catastrophic ", a added Guillaume Poupard.

"This is the whole point of the discussion with telecom operators on the choice of their equipment manufacturers. It is not a trial of intention that we make to such a company or such a country. The question is just that of sovereignty ", concluded Guillaume Poupard.

Another unknown weighs on the deployment of this new technology: on June 21, the Minister for the ecological transition Elisabeth Borne announced that she had asked the Prime Minister to wait for the evaluation of the health effects of 5G by ANSES - hoped for the end of the first quarter 2021 - before deploying it. The Council of State, seized by associations worried about the potential harmful effects of 5G on health and the environment, must decide soon.

Software architecture security analysis vs Best Practice

This type of assessment on the architecture of software projects is applicable in every type of organization and, for the identification of the requirements to be met, it relies not only on key principles - such as Redundancy and Robustness, Simplicity, Self-protection, Defense in depth - but also on the reference standards: Security job description duties

essential norms and standards, interpreted with the experience and understanding of the business, such as the control model of the Cobit © 5 framework;
international standards, such as the ISO 27000 family;
specific reference architecture, requested by the supplier.
The objectives of a software architecture security analysis with respect to the best practices
Among the main objectives of the software architecture verification activity with respect to the Security Best Practices are:
third-party review of possible software architecture flaws in addressing vulnerabilities;
verification of the software architecture's ability to support the business needs required in terms of security without weighing down performance;
verification of any flaws in the security of the software architecture.
The assessment may also consider the verification downstream of the actual realization of the architecture proposed in the software projects.

At the beginning of the assessment program, DNV GL analyzes the architecture based on the Best Security Practices applicable to the fields of Product Software Architecture, System Architecture, Network Architecture and highlights the gaps to be filled with respect to the following requirements:
security integrated into software architecture;
robustness of the proposed solutions;
components that are part of the software architecture.
The advantages of a software architecture security analysis compared to best practices
The benefits obtainable from organizations are:
balancing of functional, quality and safety requirements;
the communication of the solutions identified between the various interested parties;
an abstract and third-party analysis of the system, culminating in the drafting of a Report with the possible weaknesses found.

COVID ‑ 19 Contact Tracking Apps: Tech Help or Privacy Concern?

Clearly, there is no one-size-fits-all or one-size-fits-all solution to the individual needs of the world's government and health agencies trying to use technology to help reduce COVID-19 infection rates.

According to Wikipedia , more than 30 countries have (or are planning to launch) applications designed to trace contacts or keep users isolated in order to limit and manage the spread of COVID-19. The development and distribution cycle of these urgent solutions is unprecedented. Ask members of any app development team if they could develop an app and the infrastructure to support 100 million or more users in less than three months, and they'll answer no, and that's after they stop laughing at the suggestion.

Reaching a phone near you information security job description examples
The concept of tracking or tracing contacts is to inform people that they may have come into contact with another person who has contracted or is showing symptoms of an infectious disease, in this case COVID-19. The recipient of the notification may take precautionary measures, such as self-isolation. This has been shown to be successful in helping to eradicate other diseases such as smallpox and has been used to control others such as tuberculosis, measles, and HIV. Considering that a large percentage of the world's population carries a smartphone, technology should be able to play an important role, which explains why we are seeing an increase in the development of contact tracking applications.

Most of the apps currently available are government sponsored and use a variety of different methods to fulfill their purpose, such as Bluetooth vs. GPS, centralized vs. decentralized, and not everyone cares about user privacy.

There are two main methods that are used to obtain the physical proximity of users. The first is the global positioning system (GPS): it uses radio navigation by satellite to approximate the location of the individual and the location of other users of the application. The second, more prominent solution uses Bluetooth and signal strength to identify the proximity of other app users, allowing devices to exchange handshakes instead of tracking the actual location. There are some solutions that use a combination of Bluetooth and GPS for tracking and location, and some even use network-based location tracking, but these methods present significant privacy concerns and fortunately their use is limited to a few developments.

However, there is an underlying problem: Bluetooth “discover” mode is not enabled while a phone is locked and the requesting application is not primary. So far there has been no reason for this to be enabled. The earliest versions of apps like BlueTrace, the Singapore government solution, depended on their users keeping their phones unlocked. The UK NHS beta app had a unique solution for this, at least for Android, but it seems that the limits implemented by Apple on iOS have meant that this was somewhat unreachable and required developers to work with the official API of exposure notifications from Apple and Google.

The joint Google and Apple solution, which is the official Exposure Notifications API, preserves privacy and provides a method of using Bluetooth Low Energyand cryptography to provide a contact tracking infrastructure. The use of the API is limited to public health authorities and access is only granted when specific criteria on privacy, security and data are met. However, this API is only part of a solution that an application needs to offer the necessary functionality. If an app requests personal information, either directly or by other methods, it could make this privacy-friendly solution questionable. The perception of a potential user of a contact tracking app that uses this solution may be that the application, due to the solution of Google and Apple, has been developed to preserve the privacy of the person, which could give a false impression of security.

It is also speculated that the use of the Exposure Notification API and Bluetooth for proximity and distance measurement on iOS devices may not be accurate; This was alluded to by the UK government when it announced the cessation of the development of its own solution. Some of the possible problems were detailed in an article published by MIT Technology Review, in which it is stated that if the phone in the pocket is oriented in a vertical position instead of horizontal, this can only adjust the received power and make it appear that someone is on the other side of the room instead of being at your side. Research also cites the problem of signals passing through bodies - for example, if two people are standing with their backs to each other, the signal may appear weak and thus record an incorrect distance. The UK government claims to have developed algorithms that reduce some of these problems; Hopefully the tech giants are willing to at least explore the possible solution that the British National Health Service (NHS) team claims to have.

The solution created by Google and Apple join eight other frameworks that have been created since the beginning of the pandemic. These frameworks have been created in parallel by a set of technology companies, privacy organizations, academia, and governments. If the world were to adopt a framework, of course there would be standardization, but this also adds a single point of failure if the framework is compromised or fails to deliver the expected results.

The terms decentralized and centralized are frequently used to visually represent where the data collected by a contact tracking application is processed and stored; giving the perception that centralization creates a greater risk to privacy. This may not be true, as there are designs that use a centralized approach but potentially provide the user of the application with the desired level of privacy. The underlying problem is whether the use of data can be misused; that is, if the identity of the user is revealed or if this information can be easily obtained.

Who is Solution Architect: Processes, Role Description, Responsibilities

The responsibilities of the position are:
Provide the implementation strategies, the configuration targets and the architectural rules necessary and prior to the completion of the projects;
Ensure compliance with targets and rules in the definition and implementation of projects;
Document and integrate detailed technological architectures aimed at a harmonious deployment of infrastructure and application components;
Set up technological solutions meeting the business need and align with the direction of management;
Define and / or validate the technical and functional aspects of the solution to ensure compliance with business needs and organizational standards;
Manage relationships with all stakeholders to ensure that the solution meets business requirements;
Propose different acquisition solutions, by performing contextual analyzes favoring user-centered systems;
Advise the client on the choice of an appropriate solution;
Participate in the incident and problem management process to identify failures and resolve them with the least possible impact on operations and project delivery;
Respect the appropriate standards and procedures including change control and documentation;
Take part in other development, quality control and incident management activities, according to the specific needs of each project information technology architect jobs.

The profile sought is as follows:
Hold a bachelor's degree in a relevant field (computer science, software engineering, technology engineering or in a related discipline);
Have a master's degree in a relevant field (an asset);
Have seven (7) years of experience as a solutions architect;
Know the architectural frameworks, methodologies and systems design tools, as well as the concepts of business strategy;
Stay informed of emerging technologies and their application markets;
Know the requirements of systems architecture: performance, maintainability, scalability, dimensional adaptability, availability, security and accessibility;
Have knowledge of the deployment of digital solutions integrated into web, mobile and electronic payment portals;
Have solid experiences on Agile Practices and DevOps in cloud contexts;
Master the integration of business intelligence solutions in the delivery of business solution projects;
Have a knowledge of development methodologies and object oriented concepts;
Have excellent knowledge of private, public and hybrid cloud environments and architectures;
Master the concepts of service oriented architecture (SOA) and microservices (API Management);
Have an excellent knowledge of Microsoft technologies: C # and .NET, SQL Server, Office 365, Dynamics 365, SSIS, SSRS, Power BI and SharePoint;
Have an excellent knowledge of Oracle technologies: Forms, Report and Java;
Have experience in deploying geo-referenced and cartographic solutions;
Have a strong capacity for analysis, synthesis and communication;
Master the French language (oral and written).