Security Solutions Architect

As a Security Solutions Architect within the Security & Risk Management department, you will specialize in network security. Your role involves deeply integrating with various teams to embed security practices, implement robust protections, and expedite remediation efforts. You will be instrumental in reducing organizational risks by collaborating closely with Network teams and other departments, ensuring security is a core component of all solutions.

Must Have

• Drive the remediation of critical vulnerabilities within the assigned scope, including post-incident actions.
• Implement security measures on behalf of network infrastructure teams.
• Deploy major security initiatives across the entire scope of your mandate.
• Provide expert security recommendations adapted to our systems and context.
• Design and maintain secure configuration models and security hardening standards.
• Prototype and validate new security enhancements or solutions.
• Ensure adequate documentation of all implemented security controls and measures.
• Contribute to a body of best practices, knowledge bases, and guides to promote early security integration (shift-left) and self-service automation.
• Expertise in network security (L2-L4, routing, ACL, VPN, segmentation, LAN/WAN, firewalls, load balancers).
• Strong proficiency in cloud network security (AWS, Azure, VPC/VNet, peering, security groups, hybrid connectivity, policy enforcement).
• Skills in Linux system security (nftables/iptables, hardening, logging, securing DNS, IDS, Suricata).
• Proficiency in automation (IaC: Terraform, Ansible; scripting: Python, Go, Bash).
• Knowledge of advanced network and security concepts (DNSSEC, PKI, TLS, reverse proxies, NAC, 802.1X).
• Familiarity with cloud-native and container security (Kubernetes, CNI/Calico, zero-trust, SIEM, root cause analysis).

Perks & Benefits

• Profit-sharing, company savings plan
• 25 paid leave days, 12 RTT days (reduction of working time)
• 50% public transport pass coverage
• Meal vouchers
• Good health insurance
• Ubisoft benefits
• 20 weeks maternity leave
• 7 weeks paternity/co-parental leave
• On-site gym at Saint Mandé office
• Hybrid work model (3 days on-site, 2 days remote)

Company Description

Ubisoft is a global leader in video games, with teams worldwide creating original and memorable gaming experiences, from Assassin’s Creed to Rainbow Six, Just Dance, and many more. We believe that diverse perspectives advance both players and teams. If you are passionate about innovation and want to push the boundaries of entertainment, join our adventure and help us create the unknown!

Job Description

You will join the Security & Risk Management department as a Security Solutions Architect, with a focus on network security topics. By fully integrating into the teams, you will embed security from within, implementing protections and accelerating remediations. You will contribute to risk reduction by incorporating yourself within the Network teams, while collaborating with the rest of the organization.

Key Responsibilities

• Drive the remediation of critical vulnerabilities within the assigned scope, including post-incident actions.
• Implement security measures on behalf of network infrastructure teams.
• Deploy major security initiatives across the entire scope of your mandate.
• Provide expert security recommendations adapted to our systems and context.
• Design and maintain secure configuration models and security hardening standards.
• Prototype and validate new security enhancements or solutions.
• Ensure adequate documentation of all implemented security controls and measures.
• Contribute to a body of best practices, knowledge bases, and guides to promote early security integration (shift-left) and self-service automation.

Qualifications

Relevant Experience, Skills, and Knowledge

• Network security expertise on L2 to L4 layers including routing, ACL, VPN, segmentation, LAN/WAN architectures (e.g., Cisco), firewall, and data center load balancers.
• Strong proficiency in cloud network security for AWS and Azure, including VPC/VNet design, peering, security groups/NSG, firewall, hybrid connectivity, and policy enforcement (e.g., Calico).
• Linux system security skills, including nftables/iptables, hardening, logging, and securing services such as DNS, IDS, PowerDNS, and Suricata.
• Proficiency in automation via Infrastructure as Code (e.g., Terraform, Ansible) and scripting/programming in Python, Go, or Bash for tools and workflows.
• Knowledge of advanced network and security concepts such as DNSSEC, PKI, TLS, reverse proxies, NAC solutions (e.g., Cisco ISE), 802.1X, and device state management.
• Familiarity with cloud-native and container security, including Kubernetes networking, CNI/Calico, zero-trust architectures, and operational practices such as SIEM usage and root cause analysis.

Additional Information

Ubisoft Benefits

• Profit-sharing, company savings plan. In addition: 25 paid leave days, 12 RTT days, 50% public transport pass coverage, meal vouchers, good health insurance, and many Ubisoft benefits.
• 20 weeks maternity leave, 7 weeks paternity/co-parental leave.
• Our offices are in Saint Mandé (line 1, Saint Mandé stop), with a gym on-site. In application of our hybrid work model, 3 working days per week are performed from our Saint-Mandé offices, and 2 working days per week are performed remotely.

Recruitment Process

• [30 minutes]: phone call with a Recruiter.
• [60 minutes]: technical interview with the hiring manager.
• [60 minutes]: behavioral interview with the hiring manager.

Information about Ubisoft

As an employer, Ubisoft offers everyone the same opportunities for employment regardless of gender, ethnicity, religion, sexual orientation, social status, disability, and age. Ubisoft strives to develop an inclusive work environment that reflects the diversity of its player community within its teams.

We adopt a hybrid work model that helps you stay connected with your team and aligned with company priorities, while giving you the opportunity to maintain your work-life balance. Note that some roles are entirely office-based and are not eligible for hybrid work.