Cloud Architect / Zero Trust & Cyberlab Lead

Job Description

3. The Core Missions

Strategy Definition & Secure-by-Design Architecture

Act as the senior technical referee. You will define, validate, and promote the Zero Trust architecture blueprint across Group teams and global BUs. You will steer technical choices away from legacy, network-dependent constraints and advocate for modern identity-centric, browser-enforced, and resource-level controls.

Cyberlab Leadership & Prototyping

Lead the technology watch and build practical proof-of-concepts (PoCs) within our Cyberlab. This involves validating advanced solutions and determining their fit for Veolia's maturity and scopes criticality.

For instance, you will have to consider the protection of AI components (LLMs, generative AI, and autonomous agents) as well as develop specific integration models (such as SASE/ZTNA) designed exclusively to securely integrate legacy software and OT/SCADA environments into our trust framework.

Global Support for Business Units (BUs)

Democratize Zero Trust and native protection of our assets. You will build and publish reusable "blueprints", starter kits, and architectural templates to facilitate easy migration paths for local teams.

When local BUs face unique architectural hurdles, you will use your pragmatism and expertise to design secure workarounds, ensuring security acts as an enabler to business delivery rather than a blocker.

The Design & Legal Assessment (DLA)

Contribute as an expert to the DLA process to support DLA team in evaluating and auditing newly introduced or renewed Group solutions (SaaS, PaaS, Mobile, and complex multi-cloud deployments).

Qualifications

4. The Technical Playground & Profile

• Cloud & Web Ecosystems: Public Clouds (GCP, AWS, Azure), Web-Oriented Architecture (WOA), REST APIs, Internet Standards, Web application delivery pipelines.
• Transition & Hybrid Stack: SASE, ZTNA, CASB, SSPM/CSPM, Proxies, and perimeter simulation tools (strictly utilized for legacy/OT network containment).
• Zero Trust & IAM: Managed/Secure Enterprise Browsers as Zero Trust foundation based on Managed Chrome and Context-Aware Access (CAA) and Chrome Enterprise Premium (CEP) for identity and data enhanced protection. Microsoft Entra ID, Identity & Access Governance (IAG), Conditional Access, Endpoint Management.
• Industrial & Operational (OT): SCADA systems, operational industrial environments, and basic OT cybersecurity principles.
• DevSecOps & Code Culture: CI/CD integration, automation concepts, and development best practices.
• Artificial Intelligence (AI): Artificial Intelligence principles, securing LLM workloads, GenAI, and Agentic AI workflow protections.
• Cybersecurity Frameworks: NIST CSF, OWASP, Secure-by-Design architecture methodologies, Security Information & Risk Management (Risk-based approach)

5. The Professional DNA (Soft Skills)

• The Pedagogical Evangelist: Advanced ability to popularize highly complex technical concepts. You represent security not as an obstacle but as an enabler, building clear educational content and hosting workshops to win hearts and minds.

• The Federator: Strong team spirit and diplomacy. You represent your team with "one team, one voice," bringing international BUs together to make secure architectural decisions by consensus.

• Rigorous & Autonomous: Excellent self-direction and ability to make calculated architectural decisions with the right level of reporting. You hold high technical standards and ensure clean implementation.

• Appetite for Continuous Learning and Innovation: A natural curiosity for operational processes and a drive to experiment with new security tooling and market trends within the Cyberlab.

6. Key Details

• Contract Type: CDI
• Location: Aubervilliers, France (Hybrid-friendly environment)
• Experience Requirements: Typically 5+ years of experience in enterprise systems design and modern cloud security architectures.
• Language Requirements: Fluent English (written & spoken) is an operational requirement for international BU collaboration.

Additional Information

We offer you the opportunity to join a company whose goal is to become the leader in ecological transformation! 

What we offer: 

• Being part of a collective that cares about your future career and development 
• Opportunities for growth within Veolia Headquarters and more broadly within the Veolia Group, in France and internationally 
• Opportunity to be part of enriching projects outside of your daily work 
• Veolia is committed to a global social pact for all its employees worldwide 
• We are committed to providing you with the best possible experience 

But also: 

• 100% reimbursement of urban transport subscriptions
• 10 days off (RTT) in addition to the 5 weeks of paid vacation
• Company restaurant and meal vouchers for teleworking days
• Profit-sharing 

Veolia Environnement SA recognizes that some candidates only apply if they think they have checked all the boxes. But we prefer to see your application rather than risk missing out on your potential! 

As an inclusive company, Veolia is committed to diversity and gives equal consideration to all applications, without discrimination.