Security Architect / Engineer

As a Security Architect/Engineer at CGI, your primary responsibilities include focusing on private cloud initiatives, secure configurations, and ensuring adherence to security standards. You'll collaborate with Security Enterprise Architects and engineering teams to document processes and conduct security assessments, while also providing guidance to IT and security teams. You will also play a role in conducting risk assessments and supporting incident response efforts.

To be considered for the Security Architect/Engineer role at CGI, candidates typically need a minimum of 10 years of experience in IT security, preferably with a CISSP or CCSP certification. Strong understanding of security best practices, risk assessments, and experience with tools like Delinea Secrets Server is essential. Familiarity with cloud technologies and strong documentation skills are also important.

At CGI, the work environment for a Security Architect/Engineer is collaborative and dynamic. You’ll work alongside talented professionals from various teams, sharing insights and developing innovative security solutions. CGI fosters a culture of ownership and teamwork, where your contributions directly shape the organization’s direction and success.

In the Security Architect/Engineer role at CGI, you will engage with a range of technologies including Delinea for secrets management, PowerShell for scripting, and various cloud platforms like Azure. Your technical toolkit will also involve knowledge of Active Directory, Linux security configurations, and frameworks for implementing zero trust architectures.

CGI is dedicated to your professional growth as a Security Architect/Engineer. The company offers comprehensive training and development opportunities, with access to various resources to enhance your skills. You’ll also have the chance to take on challenging projects that broaden your experience and impact the organization positively.

When answering this question, discuss specific projects where you conducted risk assessments, the methodologies you used, and how your findings influenced security protocols. Highlight your ability to analyze risks and suggest solutions that align with organizational needs.

Explain that Zero Trust Architecture is crucial in mitigating risks by assuming that threats can exist both inside and outside a network. Share your understanding of its principles, such as verifying all users and devices and enforcing least privilege access, which are foundational to modern security strategies.

Discuss your approach to continuous learning in the cybersecurity field, such as attending conferences, participating in webinars, and following thought leaders. Mention any relevant certifications or training that keep your knowledge up-to-date, showcasing your commitment to professional development.

In your response, emphasize the importance of assessing potential risks, creating a detailed disaster recovery plan, and regularly testing recovery procedures. Provide examples of how you’ve implemented these strategies in previous roles and the impact they had on business continuity.

Detail a specific instance where you identified a security vulnerability, explaining the steps you took to resolve it, including how you worked with other teams to implement the necessary changes. Highlight your problem-solving skills and the need for collaboration in security management.

Talk about your structured approach to documentation, emphasizing clarity and accuracy. Mention tools you use for documentation and how you ensure that all stakeholders are aligned with security protocols through effective communication.

Discuss your familiarity with industry compliance standards relevant to the role, such as GDPR, HIPAA, or PCI-DSS. Provide examples of how you've helped organizations meet these standards and the methods you employed to ensure compliance.

Explain your strategy for prioritizing security tasks based on risk assessment, urgency, and stakeholder needs. Share techniques like creating to-do lists, using project management tools, or collaborating with team members to manage workload effectively.

Detail your hands-on experience with managing Active Directory, highlighting specific aspects such as group policy management, authentication mechanisms, and implementing security measures to safeguard Directory services. Be ready to discuss any challenges you faced and how you overcame them.

Describe your systematic approach to incident response, which includes detection, containment, eradication, and recovery phases. Mention your involvement in forensic investigations and how you ensure thorough documentation and learning from the incidents to strengthen future security measures.