> Markdown version of [/jobs/ext/2992122-cloud-architect-zero-trust-cyberlab-lead-m-f-h-f](https://www.wearedevelopers.com/jobs/ext/2992122-cloud-architect-zero-trust-cyberlab-lead-m-f-h-f). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Architect - Zero Trust & Cyberlab Lead M - F H/F - **Company:** Veolia - **Location:** Aubervilliers, France (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Clean Code Principles, Microsoft Access, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Continuous Integration, Digital Architecture, Supervisory Control and Data Acquisition (SCADA), Web Browsers, Identity and Access Management, Internet Standard, Open Web Application Security, Platform as a Service (PAAS), Azure Active Directory, Zero Trust Network Access, Web Applications, Google Cloud, Delivery Pipeline, Large Language Models, Multi-Cloud, Virtual Agents, Restful APIs, Devsecops - **Published:** September 19, 2026 - **Apply:** https://www.hellowork.com/fr-fr/emplois/83546400.html ## About the Role market trends within the Cyberlab.6. Key DetailsContract Type: CDILocation: Aubervilliers, France (Hybrid-friendly environment)Experience Requirements: Typically 5+ years of experience in enterprise systems design and modern cloud security architectures.Language Requirements: Fluent English (written & spoken) is an operational requirement for international BU collaboration., * The Pedagogical Evangelist: Advanced ability to popularize highly complex technical concepts. You represent security not as an obstacle but as an enabler, building clear educational content and hosting workshops to win hearts and minds. * The Federator: Strong team spirit and diplomacy. You represent your team with "one team, one voice," bringing international BUs together to make secure architectural decisions by consensus. * Rigorous & Autonomous: Excellent self-direction and ability to make calculated architectural decisions with the right level of reporting. You hold high technical standards and ensure clean implementation. * Appetite for Continuous Learning and Innovation: A natural curiosity for operational processes and a drive to experiment with new security tooling and market trends within the Cyberlab., * Experience Requirements: Typically 5+ years of experience in enterprise systems design and modern cloud security architectures. * Language Requirements: Fluent English (written & spoken) is an operational requirement for international BU collaboration. ## Description Global Impact: Directly protect the digital ecosystem enabling Veolia's ecological transformation. By aligning security with strategic business stakes, you will make digital trust an accelerator of ecological solutions and safeguard the water, waste, and energy solutions of tomorrow. - Architectural Agility: Design custom, adaptive security postures that match the actual maturity and criticality of each environment-leveraging modern browser-level Zero Trust for high-speed cloud business, while pragmatically securing legacy and OT scopes. Orchestrate safe growth, instead of enforcing static checklists. - Synergy and rationalisation: Rationalize and simplify our global protection stack-reducing architectural complexity, eliminating redundant tools, and co-designing elegant, unified standards-by federating and animating a vibrant international community of Zero Trust contributors and experts across our Business Units. Turn our technical diversity into a streamlined strength! 3. The Core Missions Strategy Definition & Secure-by-Design Architecture Act as the senior technical referee. You will define, validate, and promote the Zero Trust architecture blueprint across Group teams and global BUs. You will steer technical choices away from legacy, network-dependent constraints and advocate for modern identity-centric, browser-enforced, and resource-level controls. Cyberlab Leadership & Prototyping Lead the technology watch and build practical proof-of-concepts (PoCs) within our Cyberlab. This involves validating advanced solutions and determining their fit for Veolia's maturity and scopes criticality. For instance, you will have to consider the protection of AI components (LLMs, generative AI, and autonomous agents) as well as develop specific integration models (such as SASE/ZTNA) designed exclusively to securely integrate legacy software and OT/SCADA environments into our trust framework. Global Support for Business Units (BUs) Democratize Zero Trust and native protection of our assets. You will build and publish reusable "blueprints", starter kits, and architectural templates to facilitate easy migration paths for local teams. When local BUs face unique architectural hurdles, you will use your pragmatism and expertise to design secure workarounds, ensuring security acts as an enabler to business delivery rather than a blocker. The Design & Legal Assessment (DLA) Contribute as an expert to the DLA process to support DLA team in evaluating and auditing newly introduced or renewed Group solutions (SaaS, PaaS, Mobile, and complex multi-cloud deployments)., workflow protections.Cybersecurity Frameworks: NIST CSF, OWASP, Secure-by-Design architecture methodologies, Security Information & Risk Management (Risk-based approach)5. The Professional DNA (Soft Skills)The Pedagogical Evangelist: Advanced ability to popularize highly complex technical concepts. You represent security not as an obstacle but as an enabler, building clear educational content and hosting workshops to win hearts and minds.The Federator: Strong team spirit and diplomacy. You represent your team with "one team, one voice," bringing international BUs together to make secure architectural decisions by consensus.Rigorous & Autonomous: Excellent self-direction and ability to make calculated architectural decisions with the right level of reporting. You hold high technical standards and ensure clean implementation.Appetite for Continuous Learning and Innovation: A natural curiosity for operational processes and a drive to experiment with new security tooling and, * Cloud & Web Ecosystems: Public Clouds (GCP, AWS, Azure), Web-Oriented Architecture (WOA), REST APIs, Internet Standards, Web application delivery pipelines. * Transition & Hybrid Stack: SASE, ZTNA, CASB, SSPM/CSPM, Proxies, and perimeter simulation tools (strictly utilized for legacy/OT network containment). * Zero Trust & IAM: Managed/Secure Enterprise Browsers as Zero Trust foundation based on Managed Chrome and Context-Aware Access (CAA) and Chrome Enterprise Premium (CEP) for identity and data enhanced protection. Microsoft Entra ID, Identity & Access Governance (IAG), Conditional Access, Endpoint Management. * Industrial & Operational (OT): SCADA systems, operational industrial environments, and basic OT cybersecurity principles. * DevSecOps & Code Culture: CI/CD integration, automation concepts, and development best practices. * Artificial Intelligence (AI): Artificial Intelligence principles, securing LLM workloads, GenAI, and Agentic AI workflow protections. * Cybersecurity Frameworks: NIST CSF, OWASP, Secure-by-Design architecture methodologies, Security Information & Risk Management (Risk-based approach) ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal) - [Rest API Antipatterns](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best Companies to Work For in Paris: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/190-best-companies-to-work-for-in-paris-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)