Cloud Security Architect

Company Description

Nexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any application or network, before employees notice the issue. As the first solution to allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,200 customers to provide better digital experiences to more than 15 million employees. Dual headquartered in Lausanne, Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide.

Job Description

As a scale-up experiencing rapid growth, we seek a passionate and talented Cloud Security Architect to join our dynamic Security team. In this role, you will be responsible for the security

hardening and architecture of our cloud infrastructure, ensuring the availability, performance, and security of our SaaS offering.

What you'll do:

• As a core member of the Cloud Security team, you will have significant input in defining the direction and goals of the Cloud program.
• Design, implement, and maintain a secure and scalable cloud infrastructure on AWS considering both cloud environment and applications.
• Design and implement security controls to safeguard cloud resources, including data storage, networking, computing, and identity and access management.
• Develop and maintain incident response plans specific to cloud environments.
• Respond to security incidents and provide post-event analyses.
• Proactively identify and mitigate security risks in our cloud environment, conducting regular security assessments and vulnerability scans and leveraging tools like CNAPP.
• Collaborate with SRE and operations teams to ensure our applications and services' secure deployment and operation.
• Automate security controls and processes to improve efficiency and reduce human error.
• Stay current with the latest cloud security threats, vulnerabilities, and industry best practices.
• Contribute to the development and implementation of our cloud security strategy.
• Work closely with other Engineering teams to understand their requirements and ensure security measures align with overall business objectives.
• Manage security tools, systems, and services (SIEM, EDR, etc.) and develop and maintain metrics for performance and risk monitoring.
• Maintain and contribute to our cloud security training program for engineering teams.

Qualifications

What you'll need:

• 7+ years of hands-on experience in designing, building, and securing cloud infrastructure on AWS, with a deep understanding of AWS security services and best practices.
• Strong hands-on experience with Kubernetes, containerization technologies, and infrastructure-as-code tools (e.g., Terraform, Terragrunt, Ansible, Crossplane).
• Expertise in network security, including firewalls, VPNs, and intrusion detection systems.
• Solid understanding of identity and access management (IAM) principles and best practices.
• Experience with security automation and DevSecOps practices.
• Excellent problem-solving and troubleshooting skills with attention to detail.
• You are motivated by solving complex problems and building secure, resilient systems.
• You strongly advocate for security best practices and can effectively communicate complex security concepts to technical and non-technical audiences.
• You are a constant learner and thrive in a fast-paced, dynamic environment.
• You possess Strong communication and collaboration skills, and you are a team player with a proactive approach.
• Strong communication and collaboration skills.
• Fluent in English, both written and spoken.

Bonus points:

• Experience with other cloud platforms (e.g., Azure).
• Proficiency in Python and Golang. JavaScript/TypeScript is a plus.
• Experience with compliance standards, especially FedRamp, and SOC2.
• Knowledge of security standards and frameworks such as CIS Benchmarks, NIST, and ISO 27001.
• Experience with security monitoring and incident response.

#LI-Hybrid

Additional Information

We are the pioneers and trailblazers of a global IT Market Category (DEX) that is shaping the world's future, giving our customers’ IT Teams total digital visibility across their enterprise. Our innovative solutions integrate real-time analytics, automation, and employee feedback across all endpoints. This enables our IT teams to solve complex technical challenges, create ever more productive workplaces, and deliver happy, satisfied employees in the digital workplace.

With over 1000 employees across 5 continents, Nexthink operates as One Team, connecting, collaborating, and innovating to grow continuously. We call our employees ‘Nexthinkers,’ and our commitment to diversity, inclusion, and equity is second to none. We currently have over 75 nationalities working with us, from all cultures and backgrounds, speaking many different languages.

If you are looking for a change and like a nice atmosphere, lots of challenges, and having fun while working, this is a great opportunity for you! Check what we offer:

• 💼 Permanent Contract and a competitive compensation package (Stock Options also included).
• 🩺 Health insurance through our partnership with ACKO, including OPD coverage for dental, vision, health check-ups, consultations, and pharmacy expenses.
• 🏡 Hybrid work model balancing office and remote work, with a structured approach for new hires to foster connections and onboarding.
• 🏖️ Flexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 22 days of holidays we offer). Plus, company-paid bank holidays (12), sick days (10-30), bereavement leave (5), and 3 days per year for volunteering.
• 📚 Free access to professional training platforms to explore your interests and enhance your skills.
• 🛡️ Stay covered against accidents, bodily injuries, and disabilities with our personal accident insurance policy, providing assurance with coverage up to three times your annual CTC.
• 🍼 New mothers are entitled to up to 26 weeks of maternity leave, with the flexibility to use up to 8 weeks before the expected delivery and the remaining 18 weeks after. Birth fathers can take 4 weeks of paternity leave, while adoptive parents are eligible for 26 weeks of leave for mothers and 4 weeks for fathers.
• 💰 Under the Payment of Gratuity Act, receive gratuity at the rate of 15 days of basic pay for every completed year of service, provided you've been employed by the company for a minimum of 5 years. Gratuity is payable at retirement or resignation based on your last drawn basic pay.
• 📣 Bonuses for referring successful hires after three months of continuous employment.

Please note that not all the benefits listed above are available for temporary, contract, and internship roles. To ensure you have the most up-to-date information, we recommend checking with your Recruitment Partner.