About the Position

Cloud Infrastructure Security Specialist

Join De Novo as a Cloud Infrastructure Security Specialist to design secure cloud architecture and manage information security risks.

Responsibilities

Design secure cloud architecture in accordance with industry best practices.
Perform information security risk management and develop security policies.
Support and participate in internal and external audits.
Monitor and analyze security events and respond to information security incidents.
Manage vulnerabilities and coordinate remediation activities.
Manage access controls and permissions.
Manage infrastructure components, assets, and configurations.
Participate in disaster recovery planning and implementation.
Configure, implement, and maintain technical security solutions.
Create and maintain up-to-date technical documentation, architecture diagrams, access matrices, and configuration documentation.

Knowledge and understanding of, as well as practical experience in implementing and maintaining, ISO/IEC 27001, 27002, 27005, 27017, and ISO 22301 standards.
Understanding of IT service management and process management principles (ITIL).
Strong understanding of the OSI model and TCP/IP protocol stack.
Practical skills in configuring network technologies and equipment, including NAT, VPN, VLAN, trunking, EtherChannel/LACP, STP, routing, and ACLs.
Understanding of the fundamental principles of virtualization technologies and key models for using virtual and cloud platforms.
Familiarity with the current VMware technology stack, including vSphere, vSAN, and NSX.
Knowledge and practical experience in administering VMware-based virtual infrastructures.
Basic knowledge and practical skills in installing, deploying, configuring, and administering Windows Server and Linux environments.
Understanding of Microsoft infrastructure architecture and basic practical experience in deploying and configuring core services and technologies, including Active Directory, DNS, DHCP, PKI, ISA, and SQL Server.
Practical experience in administering and maintaining security technologies and solutions, including firewalls, VPN, IDS/IPS, FIM, PAM, MFA, and PKI.

Official employment in accordance with the Labour Code of Ukraine.
An officially declared salary.
Working hours from 9:00 a.m. to 6:00 p.m., Monday through Friday.
A hybrid working arrangement, with the possibility of working remotely one day per week subject to approval by the manager.
Medical insurance upon successful completion of the probationary period.
Corporate mobile communication services.
Access to corporate taxi services for business purposes.
A modern office equipped with everything required for comfortable and productive work.
A professional and friendly team that values collaboration and knowledge sharing.
A well-developed corporate culture and activities that support a healthy work-life balance, including:
- Sweet Fridays;
- sports activities;
- an English Speaking Club with a native speaker;
- other corporate initiatives.

A bomb shelter located directly in the building and equipped with fully functional workstations.
Uninterrupted electricity supply and communications in the office, available 24/7.

Locations:

Work Location Type:

Employment Type:

Experience Level: