{"id":2726153,"url":"https://alion.io/job/uxi-pptec-unanquanjiagoushij24929","title":"云安全架构师(J24929)","company":{"id":1873617,"name":"WuXi AppTec","domain":"wuxiapptec.com","url":"https://alion.io/company/wuxiapptec","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Beisen","truth_index":{"grade":"A","score":91,"open_postings":41,"ghost_share":0,"stale_share":0.171,"repost_share":0,"time_to_fill_p50_days":85,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shanghai, China"],"countries":["CN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Kubernetes","optional":false}],"status":"live","first_seen_at":"2026-09-02T23:46:17Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-27T10:26:37Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":54},"description":"岗位职责 / Responsibilities\n 云安全目标架构与参考架构\n设计并维护覆盖AWS、Azure、阿里云及主要SaaS环境的云安全目标架构、参考架构和标准模式。\n定义多账号、多订阅、Landing Zone、身份、网络、数据、日志、工作负载及管理平面的安全架构要求。\n 云安全控制框架与策略\n制定并维护云安全控制框架、控制目录、技术标准、安全基线和实施指南。\n将ISO 27001、CIS Benchmark、CSA CCM、NIST及适用监管要求映射至云安全技术控制。\n建立云安全标准的版本管理、适用范围、控制责任和例外管理机制。\n 安全护栏与自动化控制\n推动云安全控制通过Landing Zone及Policy as Code实现自动化落地。\n设计预防性、检测性和纠正性安全护栏，减少不安全配置进入生产环境。\n与云平台主管团队共同建立基线部署、持续合规检查及自动修复能力。\n 云平台及云服务安全评审\n对新云平台、新云服务、重要架构变更和高风险技术方案开展安全架构评审。\n为业务团队提供身份权限、云网络、数据保护、密钥管理、工作负载及日志监控等方面的架构咨询。\n定义云服务安全准入标准，并针对不满足标准的方案提出替代控制或风险处置建议。\n 云安全平台与技术选型\n负责云安全技术能力规划、产品评估、概念验证和集成架构设计。\n推动CNAPP、云安全态势管理、身份权限治理、工作负载保护、SaaS安全和数据安全能力形成统一平台。\n建立产品能力、云原生能力与运营流程之间的集成关系，避免重复建设和工具孤岛。\n 重大风险技术支持\n对重大云安全风险和复杂事件提供架构层面的技术分析、根因判断和整改方案。\n识别系统性设计缺陷，将事件经验转化为架构标准、基线、检测规则或安全护栏。\n配合云安全运营团队验证整改效果，但不承担日常告警监控和工单运营。\n 跨团队协作与技术赋能\n与全球业务团队、美国/欧洲IT团队、应用交付团队、数据安全、隐私及合规团队协作。\n将业务、法律和监管要求转化为可执行、可测试和可审计的技术控制。\n建设云安全架构知识库、标准模板和最佳实践，并开展技术培训和架构推广。\n任职要求 / Requirements\n本科及以上学历，计算机、信息安全、软件工程或相关专业; \n5年以上云安全、云架构或企业安全架构经验，其中至少3年负责复杂多云或混合云安全方案设计与落地; \n具备大型企业、多业务单元或跨区域云安全项目经验。\n技术能力\n深入理解AWS、Azure、阿里云中至少两个平台的组织、账号、订阅、身份、网络、日志、数据及安全服务架构; \n熟悉Landing Zone、多账号/多订阅治理及云治理框架; \n熟悉IAM、PAM、CIEM、工作负载身份、服务账号和机器身份安全; \n熟悉云网络分区、私有连接、边界防护及东西向流量安全; \n熟悉KMS、密钥生命周期、Secrets管理、数据加密和数据访问控制; \n熟悉容器、Kubernetes、Serverless和云原生工作负载安全; \n熟悉Terraform、Bicep、CloudFormation等IaC技术，以及Policy as Code实践; \n熟悉CNAPP、CSPM、CWPP、SSPM或DSPM等相关能力，至少在两个能力领域具有实际落地经验。\n能够将ISO 27001、CIS、CSA CCM、NIST及适用的数据保护或行业要求转化为技术控制; \n具备安全标准、架构规范、控制基线及技术例外评估经验; \n具有生命科学、医药研发、GxP或其他受监管行业经验者优先。","description_format":"text","description_chars":1477,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Chinese","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Manufacturing","Drug Discovery"],"lifecycle":[{"event":"open","at":"2026-10-16T16:22:01Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.747,"p_room":0.72,"age_days":54,"expected_fill_days":85,"reasons":["conf:4","velocity","win:mid","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/uxi-pptec-unanquanjiagoushij24929","json_url":"https://alion.io/job/uxi-pptec-unanquanjiagoushij24929.json","meta":{"generated_at":"2026-10-27T12:06:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14482,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1873617},"rest":"https://alion.io/mcp/rest/get_company?id=1873617"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fuxi-pptec-unanquanjiagoushij24929"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fuxi-pptec-unanquanjiagoushij24929"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fuxi-pptec-unanquanjiagoushij24929"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/uxi-pptec-unanquanjiagoushij24929\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fuxi-pptec-unanquanjiagoushij24929"}]}