{"id":3448030,"url":"https://alion.io/job/cgi-security-consultant-and-solution-architect","title":"Security Consultant and Solution Architect","company":{"id":1063,"name":"CGI","domain":"cgi.com","url":"https://alion.io/company/cgi","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"A","score":100,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":99000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1737},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Keycloak","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Waterfall","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-29T09:13:15Z","employer_posted_date":null,"last_verified_at":"2026-10-29T09:13:15Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Pracovní nabídka\nThe role combines security technology delivery, governance and process consulting with general solution architecture. It translates business needs into practical, secure and supportable solutions, and owns delivery from initial assessment through design, implementation, testing, deployment, operational handover and stabilization. The position supports Financial Services CZ and can deliver projects across other sectors.\n\nYour future duties and responsibilities\n\n• Lead discovery workshops to capture business, security, regulatory and operational requirements, existing processes, dependencies, constraints and acceptance criteria.\n• Assess the current environment and risks; design the target solution across applications, data, integration, infrastructure and cloud or hybrid services. Compare options against business value, risk, delivery effort and operating cost.\n• Design and deliver SIEM, IAM/IDM and PAM integrations, including interfaces, data flows, access controls and supporting processes. Install and configure services, or guide engineers through implementation and resolve design issues.\n• Translate security assessments into proportionate controls, process improvements and remediation plans. Work with governance, risk and compliance teams to define ownership, evidence and audit requirements.\n• Coordinate security, infrastructure, application, operations and audit stakeholders; manage technical dependencies, delivery risks and workstreams within Agile or Waterfall projects.\n• Define test strategy, hardening requirements, security and integration tests, and acceptance criteria. Review the implemented solution against the approved design and record changes and residual risks.\n• Prepare operational monitoring, incident response, change and patch management, backup and disaster recovery arrangements. Deliver training, knowledge transfer, handover and hypercare through stabilization.\n• Measure delivery and operational outcomes using agreed KPIs, including log source coverage, detection coverage, identity lifecycle performance and privileged account onboarding. At senior level, mentor colleagues and lead a workstream.\nTypical deliverables\n\n• Security and integration assessment, requirements catalogue and risk and remediation register.\n• High level and low level designs (HLD/LLD), architecture diagrams, integration specifications, interface contracts and data flow maps.\n• Architecture decision records, implementation roadmap and migration, cutover and rollback plans.\n• SIEM detection use cases, IAM role and lifecycle models, PAM onboarding standards, and test plans with acceptance criteria.\n• Runbooks, operating model, training materials, support ownership and an operational handover package.\n\nRequired qualifications to be successful in this role\n\nExperience and core security domains\n• Medior: typically 3+ years in security architecture, security engineering or enterprise integration. Senior: typically 5+ years, with evidence of delivery ownership and technical leadership. Experience may come from any sector.\n• Infrastructure: practical understanding of networking, Windows and Linux, Active Directory, Microsoft Entra ID, and cloud and hybrid environments. Target 3-5 years of relevant infrastructure experience.\n• SIEM: log onboarding, parsing, normalization, correlation, detection use cases, tuning, alerting and reporting; integration with SOAR and ITSM. Understand sources such as EDR, firewalls, IDS/IPS, proxy, server, application and cloud audit logs.\n• IAM/IDM: identity lifecycle, provisioning and deprovisioning, SSO, MFA, federation using SAML/OIDC, RBAC/ABAC and access governance. Understand integration with HR systems, directory services, enterprise applications and SaaS.\n• PAM: credential vaulting and rotation, session management and recording, approval workflows, just in time and just enough access, and onboarding servers, network devices, databases and application accounts.\n• Target 3-5 years of relevant experience in SIEM, IAM/IDM and PAM, with practical installation and configuration capability in at least one domain. Target 3-5 years in GRC, risk management and the ISO 27000 and ISO 31000 families; apply controls and process analysis to delivery.\n\nGeneral solution architecture requirements\n• Translate business capabilities and functional requirements into a coherent solution design. Define measurable nonfunctional requirements for availability, performance, scalability, resilience, security, privacy, maintainability and supportability.\n• Design application boundaries, data models and flows, integration patterns and interfaces. Select suitable APIs, connectors, syslog, agents and event streaming; account for authentication, authorization, errors and dependencies.\n• Evaluate on premises, cloud, hybrid, commercial and custom options. Explain technology selection and build versus buy decisions, including licensing, total cost of ownership, vendor constraints and lifecycle implications.\n• Produce clear architecture diagrams, HLD/LLD and decision records. Maintain traceability from requirements to design, implementation and acceptance; align with enterprise standards and architecture governance.\n• Plan incremental implementation, migration, cutover and rollback. Validate critical assumptions with prototypes or proofs of concept; review designs and guide delivery teams through technical tradeoffs.\n• Design an operating model covering observability, service levels, incident response, change management, patching, backup and disaster recovery, with clear ownership and support handover.\n\nAdditional requirements and advantages\nCzech and English are required. A formal degree is not required. Strong stakeholder communication, facilitation and documentation skills are essential. Designing and performing security or audit controls, and familiarity with NIST, CIS Controls and ITIL, are advantages.\nUseful platform experience includes Microsoft Sentinel, Splunk, QRadar or Elastic; SailPoint, ForgeRock, Keycloak or Microsoft Entra ID; and CyberArk, BeyondTrust or Delinea. SOAR and ITSM integrations, PowerShell or Python automation, and experience in regulated sectors are advantages.\n\nWhat we offer:\n· Share Purchase Plan\n· CGI’s My Assistance Program\n· Compensation for long term sickness up to 30 days\n· Interest-free company loan\n· Referral bonus\n· Lunch vouchers – 140CZK\n· Group life insurance\n· Flu and tick vaccination\n· MultiSport card\n· Cafeteria Benefit System – 900CZK monthly\n· Hybrid Working Model & Flexible working hours\n· 5 weeks of vacation + 3 sick days\n· Birthday Leave and CSR day\nAnd many more…\nO firmě\nCGI CS&EE Díky vysoké kvalitě IT služeb jsme si v České republice získali pověst spolehlivých profesionálů. Spolupráce s více než 90.000 odborníky, kteří...\n\n Číst více\n\n Podívejte se na profil firmy\n Benefity\n\nVzdělávací kurzy, školení\nStravenky/příspěvek na stravování\nDovolená 5 týdnů\nZdravotní volno/sickdays\nMožnost občasné práce z domova\nZvýhodněné půjčky zaměstnancům\nObčerstvení na pracovišti\nPříspěvek na sport/kulturu/volný čas\nKafetérie\nMobilní telefon\nFiremní akce\nBonusy/prémie\nNotebook\nInformace o pozici\n Společnost\n CGI CS&EE\nLaurinova 2800/4, Praha – Stodůlky Požadované vzdělání\n Středoškolské nebo odborné vyučení s maturitou\n Požadované jazyky\n Čeština (Pokročilá), Angličtina (Pokročilá)\n Zařazeno\n IS/IT: Konzultace, analýzy a projektové řízení, IS/IT: Vývoj aplikací a systémů \n Typ pracovního poměru\n Práce na plný úvazek\n Délka pracovního poměru\n Na dobu neurčitou \n Typ smluvního vztahu\n pracovní smlouva \n Zadavatel\n Zaměstnavatel\n\n Odpovědět","description_format":"text","description_chars":7611,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Cafeteria","Flexible schedule","Hybrid work","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-29T09:13:15Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":19,"reasons":["seen:1","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/cgi-security-consultant-and-solution-architect","json_url":"https://alion.io/job/cgi-security-consultant-and-solution-architect.json","meta":{"generated_at":"2026-10-31T11:19:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17345,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1063},"rest":"https://alion.io/mcp/rest/get_company?id=1063"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcgi-security-consultant-and-solution-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcgi-security-consultant-and-solution-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcgi-security-consultant-and-solution-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cgi-security-consultant-and-solution-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcgi-security-consultant-and-solution-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3448030}},{"tool":"search_jobs","arguments":{"company":"cgi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3448030},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}