Senior Technical Architect

JD :
Position / Role :
Lead Security Architect Strong software development skills .NET/C#, React/Angular, and knowledge of C/C++ (IoT Device development) and Python Architectural understanding of IoT/Gateway/Edge, Connectivity, Cloud services and infrastructure Possesses some of these qualifications:
Kubernetes, Docker, Azure SaaS/PaaS (and/or equivalent in other cloud platforms, such as Google, AWS, AliCloud) Protocols experience, e.g.
Modbus and BACnet (fieldbuses), e.g.
Wifi and Bluetooth (wireless protocols), e.g.
HTTPS and MQTT (IoT and web-based protocols) Public key infrastructures knowledge, e.g.
X.509 certificate chains Strong execution skills regarding defensive/offensive cyber security measures within Cloud and IoT specifically Knowledge of cyber security assessments such as CSA CCM and IoT SF Understanding and hands-on experience of security tools like SCA, DAST, SAST and IAST tools Practical experience with relevant methods, e.g.
Threat Modeling and STRIDE Knowledge of incident response, risk management and disaster recovery planning Knowledge of relevant security standards, e.g.
ISO27001, IEC62443 and ETSI 303 645 Knowledge of relevant global security legislation, e.g.
NIS2 and cyber resilience act Roles / Responsibilities :
Develop, drive and execute the Digital Development Security Agenda in digital software development departments in Grundfos.
Define and apply security policies and develop and implement operational rules-of-engagements, process descriptions, and developer guides in collaboration with IS Security.
Work closely with senior developers to ensure that code libraries, code standards, etc.
incorporate proper security elements.
Ensure that security driven requirements are properly prioritized in the scrum teams.
Ensure that the security knowledge with our software developers stay up to date by driving a learning agenda Scope and participate in Penetration Test and Vulnerability Scan feedback and ensure that cyber/information security risks are addressed.
Perform security assessments of devices and digital offerings.
Participate in incident response and vulnerability management teams Understand and guide in relation to regulatory requirements, e.g.
NIS2, GDPR, ENISA, DHS, UK NCSC/GCHQ.
(1.
To recommend client value creation initiatives and implement industry best practices (2.
Reviews on the architecture and design deliverables and support as an SME (3.
To architect, design and develop (through Team) solution for productorproject and sustenance delivery (4.
To ensure knowledge up-gradation and work with new technologies so that the solution is current and meets quality standards and the client requirements (5.
To gather specifications and deliver solutions to the client organization based on understanding of a domain or technology (6.
To train and develop team so as to ensure that there is an adequate supply of trained manpower in the said technology and deliver risks are mitigated