Zero Trust Architect M/F

Job description

Strategy Definition Based on his/her IT and Cyber expertise, the Zero Trust Architect is the technical referee for the DCC team and actively contributes to defining and promoting the Zero Trust strategy within Veolia, with the Group teams, and with the BUs. He/she ensures that new technical choices are consistent with the established Zero Trust strategy and contributes to the conception of robust and secured technical architectures. Technology Watch and Solution Assessment As lead of the Cyberlab, the Zero Trust Architect conducts technology watches on market solutions and documents the ones that would add value to Veolia and allow to raise the Zero Trust maturity. He/she involves and federates concerned representatives from the different DB&T operational teams—and, when appropriate, from the BUs and the Group Cyber team— in the evaluation process to leverage the Cyber expertise within each team. Support for BUs The Zero Trust architect is involved during the rollout phases of Zero Trust starter kit and Zero Trust-boosting solutions to advocate, promote the approach, and develop the technical part of the marketplace offer (documentation, supporting arguments, etc.) when applicable. In addition, he/she needs to understand local challenges: his/her technical expertise allows to support local BU teams by finding the right path to Zero Trust and workarounds or solutions to specific issues encountered locally and/or by serving as a liaison with the relevant expert teams. These missions require the Zero Trust Architect to have a solid understanding of technical, cross-functional (organisational, financial, legal, etc.), and business challenges in order to adapt to the different contexts he/she may face. His role is key not only in defining the strategy but also in ensuring its adoption with always the same goal to raise the Zero Trust maturity level of Veolia. Educational background: Ideally Bac +5, engineering school or university, Computer Science or Cybersecurity. Experience: Expertise in Information System and Cloud architecture (> 5 years), with experience and appetite in Cybersecurity. Good knowledge of AI and OT/SCADA systems would be useful. Knowledge Cloud computing principles (GCP, AWS, Azure) Microsoft Entra ID : cloud-based identity and access management (IAM) solution REST architecture style, Web API, Internet standards Web Oriented Architecture: principles and constraints Cybersecurity governance and technical frameworks (NIST, OWASP…) Cybersecurity technical tools, components and market top solutions Zero Trust related technologies (IAG, Conditional Access, managed browser/device, SASE, ZTNA, CSPM/SSPM, CASB, Proxy, CI/CD, SOC, SOAR, … ) Industrial environment AI GenAI Agentic principles Project management Skills and qualifications Good technological IS culture and understanding Development notion and environment (CICD pipeline) Curiosity for all the company's operational processes (business, marketing, sales, accounting, production, etc.) and an ability to translate these business concepts into a data architecture Knows and respects good practices and security rules Tools for Communication & Collaboration (G Workspace) Language Fluent in English Behaviour skills Innovation / Creativity: Faculty to propose innovative solutions to meet a need and create value Team spirit / Cooperation: Ability to collaborate constructively and share strategy Pedagogical & communicant / Advanced technical popularisation and workshop facilitation, bringing together stakeholders around a single, well-considered decision Belief & Assertiveness / Ability to argue to federate Autonomy / Take decisions when legitimate with the right level of reporting and escalate other cases Adaptability / Flexibility: Ability to change, evolve, show flexibility according to a situation or others. Rigour / Ability to act with precision and accuracy Culture of conversation, measures, continuous learning process We offer you the opportunity to join a company whose goal is to become the leader in ecological transformation! What we offer : Being part of a collective that cares about your future career and development Opportunities for growth within Veolia Headquarters and more broadly within the Veolia Group, in France and internationally Opportunity to be part of enriching projects outside of your daily work Veolia is committed to a global social pact for all its employees worldwide We are committed to providing you with the best possible experience But also: 100% reimbursement of urban transport subscriptions 10 days off (RTT) in addition to the 5 weeks of paid vacation Company restaurant and meal vouchers for teleworking days Profit-sharing Veolia Environnement SA recognizes that some candidates only apply if they think they have checked all the boxes. But we prefer to see your application rather than risk missing out on your potential! As an inclusive company, Veolia is committed to diversity and gives equal consideration to all applications, without discrimination. Do you want to join a Group whose Purpose resonates with your own values of a world where resources and people are at the heart of daily concerns? A Group whose ambition is to participate in the transformations we are experiencing? Are you looking for a meaningful experience in Is&T functions that will allow you to combine these ambitions and bring your expertise to them? Then this job offer is for you! Veolia aims to become the reference company in ecological transformation. Our mission to "Resource the world" also reflects the commitment of our 220,000 employees to have a positive impact on our planet. At Veolia Headquarters, we are committed to empowering our employees by giving them the means to be useful and have a real impact. We are looking for employees who share our commitment. Become an actor in ecological transformation by joining us! The Group's Digital Business & Technology (DB&T) aims at driving our IS&T, Data & Digital journeys, ensuring an aligned and coordinated response from the IS&T, Data & Digital Group Directions to support Veolia’s ambition to be the global champion of ecological transformation. DB&T contributes to develop Veolia’s leading position in all its markets, reinforcing our value creation. Veolia Group DB&T launched many years ago its public Cloud strategy, based on two key principles: SaaS first solution means that for common needs a SaaS solution is preferred when it covers the business/function expectations. For specific home development, applications are directly born to the Cloud using our public Cloud partners’ services. This Cloud native strategy and the evolution of the way users are consuming the IS (on the go, remote working …) raises new Cybersecurity stakes. The traditional perimeter approach no longer makes sense and must be reviewed: the shift to Zero Trust unleashes all the capacity provided by the Cloud by securing each component of the chain (Identity / Devices / Transport / Applications) and becomes a real game changer. Main objectives of Technology Office / DCC team are to: Raise up the Zero trust maturity level and coordinate the global consistency. At Corporate level to lead by exemplarity: Federate expertise and synchronise maturity progress within the teams Identify quick wins and related priority and follow their implementation by the relevant experts. With BU teams as a path to simplification: Identify the best processes and tools needed to reach the Zero Trust graal at Veolia. Open the way to the BUs by sharing our return of experience and promoting strategic solutions. Contribute to solutions assessment / selection by maintaining and piloting the DLA process. Assess the new / renewed solutions (any type: SaaS, Paas, mobile, Complex…) by DCC DLA team and DCC Cyber and Compliance referees. Enrich the project methodology to integrate the right milestones for optimal security in all phases of the project (ISP, secure by design, risk assessment…). Identify the right tools and building blocks to industrialize cybersecurity adoption during the whole project lifecycle. Animate DB&T IC community and CAP IT campaign with BUs It is important to accompany the teams / BUs over time so that Zero Trust is considered as an ally to deliver a quality solution offering a level of protection aligned with the expectations and issues. Awareness and change management are key to success in our mission. Coordination and collaboration with the Group cybersecurity team is part of DCC team activity to ensure the compliance to Cyber policies (implementation, solutions, process), to spread them through the concerned teams and to provide Group one team, one voice recommendations to BUs.