Security Solutions Architect

Company description: Ubisoft is a global video game company with teams around the world creating original and memorable game experiences. We value diverse viewpoints and encourage innovation. Join us to help push the boundaries of entertainment.

Position summary: You will join the Security and Risk Management department as a Security Solutions Architect focused on network security. Embedded with teams, you will drive security from within by implementing protections and accelerating remediation. You will reduce risk by integrating with Network teams and collaborating across the organization.

Primary responsibilities:

• Lead remediation of critical vulnerabilities within your scope, including post-incident actions.
• Implement security measures on behalf of network infrastructure teams.
• Deploy major security initiatives across your mandated perimeter.
• Provide expert security recommendations tailored to our systems and context.
• Design and maintain secure configuration templates and hardening standards.
• Prototype and validate new security improvements or solutions.
• Ensure proper documentation of all controls and security measures implemented.
• Contribute to knowledge bases, best-practice corpora and guides to promote early security integration (shift-left) and self-service automation.

Qualifications:

• Expertise in network security at L2–L4, including routing, ACLs, VPNs, segmentation, LAN/WAN architectures (e.g., Cisco), datacenter firewalls and load balancers.
• Strong cloud network security skills for AWS and Azure, including VPC/VNet design, peering, security groups/NSG, firewalls, hybrid connectivity and policy enforcement (e.g., Calico).
• Linux systems security skills including nftables/iptables, hardening, logging, and securing services such as DNS, IDS, PowerDNS and Suricata.
• Proficiency in automation via Infrastructure as Code (e.g., Terraform, Ansible) and scripting/programming in Python, Go or Bash for tools and workflows.
• Knowledge of advanced network and security concepts such as DNSSEC, PKI, TLS, reverse proxies, NAC solutions (e.g., Cisco ISE), 802.1X and device state management.
• Familiarity with cloud-native and container security, including Kubernetes networking, CNI/Calico, zero-trust architectures and operational practices such as using a SIEM and root-cause analysis.

Additional information:

• The company operates a hybrid work model to stay connected with teams while supporting work-life balance; some roles may be fully office-based.
• Work permit eligibility may depend on education and relevant years of experience per government rules.
• Ubisoft encourages diverse applicants and will provide accommodations for the interview process if needed.