17.10.2026 aktualisiert
AD
100 % verfügbar
Cloud Security Architect | GCP & AWS | IAM | Security Automation | DevSecOps | ISO 27001
Espoo, Finnland
Nur Remote
PhD, Information Systems - University of Cape Town, South AfricaÜber mich
Cloud Security Architect with expertise in GCP, AWS, IAM, security automation, DevSecOps and vulnerability management. PhD in Information Systems. Leading cloud security architecture for FinnGen at the University of Helsinki, with experience in ISO 27001, GDPR and secure enterprise systems.
Skills
Lead cloud security architecture, engineering and governance for FinnGen's Google Cloud research infrastructure at the University of Helsinki. Experienced in security assessments, architecture reviews, control implementation, risk analysis, vulnerability management and remediation planning.
Extensive GCP experience: Compute Engine, Cloud Storage, Shared VPC, VPC Service Controls, GKE, Cloud Run, Cloud Functions, Eventarc, Cloud Scheduler, Cloud Logging and Security Command Center. Additional hands-on AWS experience, with GCP as my primary specialisation.
Google Cloud IAM, service accounts, keyless workload authentication, Google Workspace domain-wide delegation, privileged access, MFA, least privilege and identity security assessments.
Designed and deployed automated VPC Service Controls change monitoring using Cloud Functions Gen2, Eventarc and Cloud Storage. Developed suspicious-login monitoring using Google Workspace audit logs, Cloud Run Jobs and Cloud Scheduler. Python-based security analytics, audit investigations and automated control monitoring.
Assess cloud vulnerabilities, GKE/Kubernetes, Linux, container images, dependencies and firewall misconfigurations. Coordinate penetration testing, evaluate findings, prioritise remediation and review CI/CD pipelines, GitHub changes and cloud infrastructure security.
Practical experience with ISO 27001-aligned controls, GDPR, Findata secure research-environment requirements, security assessments, risk reporting, backup and disaster recovery planning.
Enterprise application development and integration using Java, C#, Spring, Hibernate, REST APIs, Apache Camel, OSGi, Oracle and SOA. Experienced with Jenkins, TeamCity, automated testing, builds and deployment.
GCP | AWS | Cloud Security | IAM | Security Command Center | ISO 27001 | GDPR | Risk Management | Vulnerability Management | DevSecOps | Kubernetes | GKE | VPC Service Controls | Security Automation | Python | Bash | Java | C# | CI/CD | Cloud Logging | Penetration Testing | REST APIs | Enterprise Architecture
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2015
Sprachen
EnglishMuttersprache
Projekthistorie
Lead cybersecurity architecture, cloud security engineering and security governance for FinnGen's Google Cloud-based genomic research infrastructure. Responsibilities include cloud security architecture and governance across GCP, Google Workspace and Kubernetes, cloud security automation using Cloud Functions Gen2 and Eventarc, identity threat detection and security analytics, firewall security assessments, IAM implementation, vulnerability assessment, penetration testing coordination, Kubernetes and DevSecOps security, AI security risk assessment, cloud data security and audit investigations, security reporting and regulatory assurance, operational resilience and disaster recovery, and technical leadership and stakeholder collaboration.
Progressed from cloud infrastructure and research information systems into a dedicated cybersecurity leadership role. Migrated large-scale biomedical and genomic research datasets from on-premises infrastructure to GCP. Architected and developed automated multi-stage scientific data pipelines for ingesting heterogeneous genomic and laboratory-generated datasets. Engineered automated data validation and quality control mechanisms. Designed and orchestrated complex multi-stage genomic analysis workflows. Developed automated post-processing, data organisation and reporting mechanisms. Integrated cloud infrastructure engineering, scientific data management, workflow orchestration and data quality assurance into reliable, scalable and reproducible workflows.
Digitized warehouse processes by developing scanning and voice-based solutions that automatically integrate with customer ERP and other systems. Worked with SOA, Apache Camel, OSGi, REST, Web Services, JEE technologies, Spring, Hibernate, Oracle and XML configuration-file parsing. Extensively used J2EE design patterns including Singleton, Factory, Builder, MVC and Prototype.