DATAROBOT Cloud Security Architect Salary in the United States

DataRobot is looking for a Cloud Security Architect to help analyze existing cloud structures and creating new and enhanced security methods/controls. We’re looking for a passionate cloud-native contributor that has the following experience and interests:

Software Development Lifecycle (SDLC)

• Support stakeholders in DataRobot’s development lifecycle program
• Participate in development of a Secure Software Development Lifecycle
• Manage and enhance security tools and build automation in the testing processes
• Enhance and support security awareness training for our AWS, GCP and Azure usage
• Implement and manage best practices and principle of least privilege for IAM and cloud directories and identity providers across the 3 major clouds

Infrastructure Security

• Partner with operations and engineering teams to implement and tune cloud-native security monitoring, tooling and reporting
• Reduce cloud and infrastructure vulnerabilities across all DataRobot cloud assets
• Participate in secure architecture reviews covering legacy and new technologies
• Perform regular risk assessments across cloud systems
• Be a change agent by recommending best practices for all DataRobot cloud systems
• Automate early, automate often

Compliance

• Assist with regularly scheduled gap assessments, internal audits, and external audits
• Drive teams toward implementing controls and processes that address identified gaps
• Contribute to a secure/compliant cloud-native service catalog
• Follow up with issues related to compliance gaps and work to resolve them
• Maintain and update audit evidence required by SOC 2, PCI, GDPR, HIPAA, ISO 27001, and others as we enhance our compliance portfolio
• Maintain and update documentation including network diagrams and security architecture plans and change control processes
• Maintain Compliance across our Production, Development and Corporate systems hosted in the public clouds

Desired Qualifications:

• BA/BS degree in Computer Science, Engineering, Management Information Systems, OR equivalent practical experience
• 4 years of engineering experience in Operations or Security of cloud-based Linux environments (AWS/GCP and SaaS experience prefered)
• Minimum 1 year of experience with active compliant environments, eg PCI-DSS, HITRUST, FEDRAMP or ISO 27001
• AWS or other Cloud Certifications
• Knowledge of risk assessment tools, technologies and methods

Experience in at least four of the following:

• Designing secure networks, systems, and application architecture
• Linux Server and Cloud Infrastructure
• Basic encryption theory and key management (PKI)
• Host or Network Based Intrusion Detection Tools (HIDS/NIDS)
• Compliance Automation
• Working effectively with international technical and non-technical resources