Security Solutions Architect

Company Description

Ubisoft is a global reference in video games, with teams around the world creating original and memorable gaming experiences, from Assassin’s Creed to Rainbow Six and Just Dance among many others. We believe that diversity of perspectives advances both players and teams. If you are passionate about innovation and want to push the boundaries of entertainment, join our adventure and help us create the unknown!

Job Description

You will join the Security and Risk Management department as a Security Solutions Architect, with a focus on network security topics. By fully integrating with the teams, you will drive security from within, implementing protections and accelerating remediations. You will contribute to risk reduction by embedding with Network teams while collaborating with the rest of the organization.

Main Responsibilities

• Lead remediation of critical vulnerabilities within the assigned scope, including post-incident actions.
• Implement security measures on behalf of network infrastructure teams.
• Deploy major security initiatives across the scope of your mandate.
• Provide expert security recommendations tailored to our systems and context.
• Design and maintain secure configuration templates and hardening standards.
• Prototype and validate new security improvements or solutions.
• Ensure adequate documentation of all security controls and measures put in place.
• Contribute to a body of best practices, knowledge bases and guides to promote early security integration (shift-left) and self-service automation.

Qualifications

• Expertise in network security for layers L2 to L4, including routing, ACLs, VPN, segmentation, LAN/WAN architectures (e.g., Cisco), firewalls and datacenter load balancers.
• Strong mastery of cloud network security for AWS and Azure, including VPC/VNet design, peering, security groups/NSG, firewalls, hybrid connectivity and policy enforcement (e.g., Calico).
• Skills in Linux system security, including nftables/iptables, hardening, logging, and securing services such as DNS, IDS, PowerDNS and Suricata.
• Proficiency with automation via Infrastructure as Code (e.g., Terraform, Ansible) and scripting/programming in Python, Go or Bash for tools and workflows.
• Knowledge of advanced networking and security concepts such as DNSSEC, PKI, TLS, reverse proxies, NAC solutions (e.g., Cisco ISE), 802.1X and device state management.
• Familiarity with cloud-native and container security, including Kubernetes networking, CNI/Calico, zero-trust architectures and operational practices such as using a SIEM and root cause analysis.

Additional Information

We adopt a hybrid working model that helps you stay connected with your team and aligned with company priorities while allowing you to maintain work-life balance. Note that some roles are fully office-based and not eligible for hybrid work.

If you require a work permit, your eligibility may depend on your education and years of relevant work experience as required by the government.

Skills and knowledge come in many forms and can be based on relevant experience, so we strongly encourage you to apply even if you do not meet all the requirements listed above.

At Ubisoft we encourage diversity in all its forms. We are committed to fostering an inclusive and respectful work environment for everyone. We know it’s important that interviews are comfortable; if you need accommodations, please let us know if we can do anything to facilitate the interview process.