O

Onepoint

End-to-end organizational transformation and modernization

Senior Consultant - Systems & Cloud Security Architecture

Security Engineering & ArchitectureUpdated on Nov 15
Full-timeParis, FranceNo salary listed

About the Job

Requirements

  • Possess advanced expertise in cloud security concepts on AWS, Azure, or GCP, including cloud IAM, KMS, VPC, peering, and private endpoints, and secure Kubernetes using RBAC, NetworkPolicy, and admission controllers.
  • Master classic and advanced networking, including TCP/IP, routing, VLANs, segmentation, reverse proxies, firewalls/NGFW, and VPNs, as well as hardening Active Directory and Entra ID environments and using bastions/PAM.
  • Understand and perform Infrastructure as Code reviews using Terraform and Ansible, coupled with IaC scanners such as Checkov and tfsec, and integrate logging requirements for SOC/SIEM observability using Splunk, Sentinel, or ELK.
  • Master major compliance frameworks including ISO 27001/2, NIST, and GDPR; high-level threat-modelling methodologies; and the architecture of AI services managed or hosted by major cloud providers.
  • Translate highly technical architecture constraints into business risks understandable to decision-makers and facilitate skills transfer.
  • Negotiate and balance cost, risk level, performance, and operational constraints.
  • Have at least six years of experience in infrastructure and cloud-environment security, with proven architecture or technical-lead responsibilities.
  • Hold or be preparing for highly valued certifications such as CISSP, CCSP, AWS/Azure/GCP Security Specialty, CKA/CKS, or ISO 27001 Lead Implementer/Auditor.
  • Demonstrate strong technical leadership, autonomy, structured thinking, and rigorous documentation.
  • Maintain ongoing awareness of cloud technology, Zero Trust, and emerging cybersecurity technologies.
  • Have excellent written and spoken English and the ability to adapt to different contexts, facilitate meetings, share knowledge, and communicate with senior decision-makers.

Responsibilities

  • Conduct in-depth security reviews across traditional on-premises infrastructure, including networks, directories, and bastions; cloud ecosystems including AWS, Azure, and GCP; and container platforms including Kubernetes.
  • Define secure reference architecture patterns and models incorporating Secure by Design and Zero Trust principles, including internet exposure and administrator/third-party access patterns.
  • Assess cloud security posture, including CSPM, key and secret management, storage and network configurations; audit network segmentation and Unix/Windows system hardening.
  • Assess AI-specific architecture risks, including prompt-based exfiltration and leaks in MLOps/LLMOps pipelines, and design secure cloud infrastructure for AI workloads, including network isolation, data zoning, and call traceability.
  • Define and prioritize technical remediation workstreams, balancing quick wins with structural projects, and estimate effort, schedules, and dependencies.
  • Mentor junior consultants, facilitate workshops with client IT teams, and contribute to business development through scoping, estimates, and responses to tenders.
  • Pilot, design, and deliver high-level security architecture and complex technical audit engagements, translating business risks and regulatory requirements into resilient, modern, secure target architectures for clients.

Desired Qualifications

  • Certifications such as CISSP, CCSP, AWS/Azure/GCP Security Specialty, CKA/CKS, or ISO 27001 Lead Implementer/Auditor are highly valued.

About the Company

Onepoint

End-to-end organizational transformation and modernization

Onepoint helps organizations modernize and transform by providing end-to-end advisory and delivery services that cover strategy, design, platforms, and implementation for both private sector companies and public administrations. It works by organizing its experts into open communities to combine business and technology skills, guiding projects from strategic vision through operational deployment across its global network of offices. The company differentiates itself through its open-community model, audacious and practical mindset, and its focus on designing concrete paths to the future—new ways of working, new business models, and new places—rather than just delivering isolated tech solutions. Its goal is to design a new world for its clients and help them move Beyond the obvious.

Company size
1,001-5,000
Company stage
Growth Equity (Non-Venture Capital)
Total funding
$176M
Headquarters
Paris, France
Founded
2002

Recently Posted Jobs

Explore more opportunities at Onepoint

See more jobs