Cloud Architect / Zero Trust & Cyberlab Lead M/F

Job description

3. The Core Missions Strategy Definition & Secure-by-Design Architecture Act as the senior technical referee. You will define, validate, and promote the Zero Trust architecture blueprint across Group teams and global BUs. You will steer technical choices away from legacy, network-dependent constraints and advocate for modern identity-centric, browser-enforced, and resource-level controls. Cyberlab Leadership & Prototyping Lead the technology watch and build practical proof-of-concepts (PoCs) within our Cyberlab.

This involves validating advanced solutions and determining their fit for Veolia's maturity and scopes criticality. For instance, you will have to consider the protection of AI components (LLMs, generative AI, and autonomous agents) as well as develop specific integration models (such as SASE/ZTNA) designed exclusively to securely integrate legacy software and OT/SCADA environments into our trust framework. Global Support for Business Units (BUs) Democratize Zero Trust and native protection of our assets.

You will build and publish reusable "blueprints", starter kits, and architectural templates to facilitate easy migration paths for local teams. When local BUs face unique architectural hurdles, you will use your pragmatism and expertise to design secure workarounds, ensuring security acts as an enabler to business delivery rather than a blocker. The Design & Legal Assessment (DLA) Contribute as an expert to the DLA process to support DLA team in evaluating and auditing newly introduced or renewed Group solutions (SaaS, PaaS, Mobile, and complex multi-cloud deployments).

Qualifications

4. The Technical Playground & Profile Cloud & Web Ecosystems: Public Clouds (GCP, AWS, Azure), Web-Oriented Architecture (WOA), REST APIs, Internet Standards, Web application delivery pipelines.

Transition & Hybrid Stack

SASE, ZTNA, CASB, SSPM/CSPM, Proxies, and perimeter simulation tools (strictly utilized for legacy/OT network containment).

Zero Trust & IAM

Managed/Secure Enterprise Browsers as Zero Trust foundation based on Managed Chrome and Context-Aware Access (CAA) and Chrome Enterprise Premium (CEP) for identity and data enhanced protection. Microsoft Entra ID, Identity & Access Governance (IAG), Conditional Access, Endpoint Management.

Industrial & Operational (OT)

SCADA systems, operational industrial environments, and basic OT cybersecurity principles.

DevSecOps & Code Culture

CI/CD integration, automation concepts, and development best practices.

Artificial Intelligence (AI)

Artificial Intelligence principles, securing LLM workloads, GenAI, and Agentic AI workflow protections.

Cybersecurity Frameworks

NIST CSF, OWASP, Secure-by-Design architecture methodologies, Security Information & Risk Management (Risk-based approach) 5.

The Professional DNA (Soft Skills) The Pedagogical Evangelist

Advanced ability to popularize highly complex technical concepts. You represent security not as an obstacle but as an enabler, building clear educational content and hosting workshops to win hearts and minds.

The Federator

Strong team spirit and diplomacy. You represent your team with "one team, one voice," bringing international BUs together to make secure architectural decisions by consensus.

Rigorous & Autonomous

Excellent self-direction and ability to make calculated architectural decisions with the right level of reporting. You hold high technical standards and ensure clean implementation.

Appetite for Continuous Learning and Innovation

A natural curiosity for operational processes and a drive to experiment with new security tooling and market trends within the Cyberlab. 6.

Key Details Contract Type

CDI Location: Aubervilliers, France (Hybrid-friendly environment)

Experience

Requirements: Typically 5+ years of experience in enterprise systems design and modern cloud security architectures.

Language Requirements

Fluent English (written & spoken) is an operational requirement for international BU collaboration.