Cloud Architect / Zero Trust & Cyberlab Lead M/F

Description

The company is a major player in ecological transformation, with 220,000 employees working on water, waste and energy solutions.

The digital and technology function at headquarters is hiring a cloud architect to lead the move to Zero Trust and support the Group's global roadmap.

The roadmap is cloud-native and SaaS-first. It moves away from heavy perimeter network controls and instead secures each link in the digital chain: identity, devices, transport, applications and data access.

The role sits in the internal Cyberlab, where new security tools are tested, and works with Group teams and business units across several countries.

Responsibilities

• Act as the senior technical arbiter for the Zero Trust blueprint across Group teams and global business units. Steer choices away from legacy network-dependent setups and toward identity-centric, browser-enforced and resource-level controls.
• Track technology trends and build hands-on proofs of concept in the Cyberlab. Judge whether each solution suits the company's maturity and the criticality of the scope.
• Design protection for AI components, including LLMs, generative AI and autonomous agents. Build integration models such as SASE and ZTNA to bring legacy software and OT/SCADA environments securely into the trust framework.
• Create reusable blueprints, starter kits and architecture templates so local teams can migrate with less effort.
• Help local business units with unusual architecture problems by designing secure workarounds, so security supports delivery rather than blocking it.
• Write clear educational material and run workshops to explain complex security topics to non-specialists.
• Serve as an expert in the Design & Legal Assessment process, supporting the DLA team in reviewing and auditing new or renewed Group solutions, including SaaS, PaaS, mobile and complex multi-cloud deployments.

Requirements

• Experience with public clouds (GCP, AWS, Azure), web-oriented architecture, REST APIs, internet standards and web application delivery pipelines.
• Working knowledge of SASE, ZTNA, CASB, SSPM/CSPM, proxies and perimeter simulation tools, used only to contain legacy and OT networks.
• Understanding of managed and secure enterprise browsers as a Zero Trust base, including Managed Chrome, Context-Aware Access and Chrome Enterprise Premium for identity and data protection.
• Knowledge of Microsoft Entra ID, Identity & Access Governance, Conditional Access and endpoint management.
• Familiarity with SCADA systems, industrial operational environments and basic OT security principles.
• Experience with CI/CD integration, automation and development best practices in a DevSecOps setting.
• Understanding of AI principles, securing LLM workloads, generative AI and agentic AI workflows.
• Working knowledge of NIST CSF, OWASP, secure-by-design methods and risk-based security management.
• Typically 5+ years of experience designing enterprise systems and modern cloud security architectures.
• Ability to make the case for security as an enabler and to popularise complex technical ideas.
• Strong teamwork and diplomacy. You bring international business units together to reach consensus on secure architecture decisions and speak with one voice for your team.
• Self-directed, able to make sound architecture calls and report at the right level. You hold high technical standards and insist on clean implementation.
• Curious about operational processes, and keen to experiment with new security tools and market trends.
• Fluent written and spoken English, required to collaborate with international business units.

Conditions

Permanent contract (CDI).

Based in Aubervilliers, France, in a hybrid-friendly setup.

Fluent English, written and spoken, is an operational requirement.

The company gives equal consideration to all applications, without discrimination.

Benefits

• Support for your career and development within a collective that values it.
• Growth opportunities at headquarters and across the Veolia Group, in France and abroad.
• Chances to take part in enriching projects beyond your day-to-day work.
• Commitment to a global social pact covering all employees worldwide.
• 100% reimbursement of urban public transport subscriptions.
• 10 days of RTT on top of 5 weeks of paid vacation.
• Company restaurant access and meal vouchers on teleworking days.
• Profit-sharing.