Cloud Architect / Zero Trust & Cyberlab Lead M/F

Veolia Group DB&T is driving a shift to Zero Trust, securing each component of the digital chain: Identity, Devices, Transport, Applications and Data Access. The Cloud Architect will lead this transition and support the global Zero Trust roadmap for Veolia, a world leader in ecological transformation. Location: Aubervilliers, France (Hybrid-friendly environment). Contract type: CDI.

Responsibilities

Define, validate and promote the Zero Trust architecture blueprint across Group teams and global BUs; Steer technical choices away from legacy, network-dependent constraints toward identity-centric, browser-enforced and resource-level controls; Lead technology watch and build proof-of-concepts (PoCs) within the Cyberlab; Consider protection of AI components (LLMs, generative AI, autonomous agents) and develop integration models (SASE/ZTNA) for legacy software and OT/SCADA environments; Build and publish reusable blueprints, starter kits and architectural templates for local teams; Design secure workarounds for local BU architectural challenges; Contribute as an expert to the DLA process, evaluating and auditing newly introduced or renewed Group solutions; Federate and animate an international community of Zero Trust contributors and experts

Requirements

Typically 5+ years of experience in enterprise systems design and modern cloud security architectures; Fluent English (written & spoken); Knowledge of public clouds (GCP, AWS, Azure), Web-Oriented Architecture, REST APIs and web application delivery pipelines; Experience with SASE, ZTNA, CASB, SSPM/CSPM and proxies; Knowledge of Zero Trust and IAM (Managed/Secure Enterprise Browsers, Context-Aware Access, Microsoft Entra ID, Identity & Access Governance, Conditional Access, Endpoint Management); Knowledge of DevSecOps (CI/CD integration, automation, development best practices); Understanding of AI principles and securing LLM, GenAI and agentic AI workloads; Knowledge of cybersecurity frameworks (NIST CSF, OWASP, Secure-by-Design, risk-based approach); Advanced ability to explain complex technical concepts; Strong team spirit and diplomacy; Rigorous and autonomous, with high technical standards; Appetite for continuous learning and innovation

Nice to have

Knowledge of SCADA systems, operational industrial environments and basic OT cybersecurity principles; Experience integrating legacy software and OT/SCADA environments via SASE/ZTNA models; Experience with protection of AI components; Experience in technology watch and proof-of-concept prototyping; Contribution to Design & Legal Assessment (DLA) processes for SaaS, PaaS, mobile and multi-cloud solutions

Benefits

100% reimbursement of urban transport subscriptions; 10 days off (RTT) in addition to 5 weeks of paid vacation; Company restaurant and meal vouchers for teleworking days; Profit-sharing; Opportunities for growth within Veolia Headquarters and the Veolia Group, in France and internationally; Opportunity to be part of enriching projects outside daily work; Hybrid-friendly work environment