Expert Security Engineer Cloud

About the role

• Barry Callebaut Digital (BC Digital) is on a mission to lead the digital revolution in the chocolate industry, and we're looking for an Expert Security Engineer Cloud, dedicated to protecting Barry Callebaut's IT environment, focusing on security measures to protect our cloud-based operations.
• Reporting to the Director of IT Security, you will monitor cloud security and patch management for consistent performance and prevent vulnerabilities of software across Barry Callebaut. You will act as an expert in ensuring the security and integrity of our cloud infrastructure but also communicate in a very effective and easy-to-understand manner with internal and external stakeholders. This includes incorporating strategic goals, regulatory requirements, external trends, and threats and risks that must be addressed into our controls and associated working processes, technologies, skills, and procedures.

Key responsibilities include

• Assist in developing and executing the vision for IT and cloud Security, aligning with the overall Security Strategy
• Design, architect and implement security architectures for complex cloud environments (focus on Azure)
• Support the implementation of policies, security controls and systems to protect our cloud environment
• Design and implement a layered security approach, including network security measures, endpoint security, and cloud security
• Implement and monitor network security measures and controls
• Provide day-to-day 3rd-level support for the cloud solutions in the scope of the IT Infrastructure Security Team
• Mentor junior engineers and foster innovation
• Gather requirements and pinpoint process and system enhancements including cloud security best practices
• Assist in the development of documentation, subject training, and other knowledge material on infrastructure security
• Collaborate effectively with a globally operating team across multiple time zones to achieve shared goals and drive project success
• Collaborate effectively with Barry Callebaut’s managed service providers in the area of cloud and security

About you 

• Degree in Computer Science, Information Technology, Cybersecurity, Infrastructure Security or a comparable field
• Minimum of 10 years of relevant working experience
• Advanced knowledge of cloud security and further layered security approaches (incl. network security measures, and endpoint security)
• Microsoft AZ-500 Azure Security Engineer
• CISSP, CompTIA+ Security, or other relevant cloud-related security certifications are highly appreciated
• Proficient in English
• Excellent knowledge in the areas of:
  • Architecture and design
  • Common cloud platforms (especially Azure)
  • Advanced cloud security tools and technologies (E.g., Azure Security Center, etc.)
  • Cloud Security Frameworks, principles, and best practices
  • Scripting and automation tools (e.g., Python, Terraform, Ansible, Azure DevOps)
  • Network Security (E.g. Check Point, Palo Alto, Fortinet, others)
  • Cloud security tools, cloud posture management (E.g. MS Defender for cloud, Check Point CloudGuard)
• Good knowledge of:
  • Secure Internet Access Gateways (E.g. Check Point Harmony, Perimeter81, Zscaler, others)
  • Endpoint Detection and Response – EDR (E.g. Carbon Black, MS Defender for endpoint, others)
  • Identity Solutions (E.g. Okta, PingIdentity, MS Entra, Radius, and others)
  • Endpoint Management (E.g. MS Intune, others)
• Independent and self-driven personality, taking responsibility and owning tasks
• The ability to bring people together and mobilize individuals to pursue a joint agenda
• Strong analytical and problem-solving skills
• Ability to interpret business requirements and draw insights with a focus and business and customer satisfaction
• Driving improvements
• Excellent written and verbal communication skills, ability to present to diverse audiences
• Willingness to learn and try new technologies and topics
• Exhibits a passion for digital technology and innovation, constantly seeking new and creative solutions to enhance processes, decision-making and user experiences
• Collaborates well across diverse and globally distributed teams, with the ability to build and maintain positive relationships across different levels and functions of the organization and the managed service providers
• Is a true team player, supporting their colleagues by sharing knowledge and experience and commits the teams’ joint success
• Possesses good problem-solving skills and analytical thinking
• Capable of effecting communication, conveying complex problems clearly and persuasively to internal and external stakeholders