Senior Cloud Security Engineer at WIPO

Location: Geneva, Switzerland

Job Reference: 26328-TA
Grade: P4
Contract Duration: 1 year (renewable up to a maximum cumulative period of 2 years)
Application Deadline: 24 November 2026 at 12:59 AM

Organizational Context

The position is located in the Security and Information Assurance Division (SIAD), which manages WIPO’s information and physical security and safety. The Division ensures that appropriate policies and procedures are in place and that effective measures and controls are established to assess and mitigate threats and risks to the Organization.

The incumbent will serve as the principal technical authority on cloud information security, defining and executing the security strategy for WIPO’s multi-cloud and hybrid environments. The role focuses on embedding security-by-design principles into cloud architectures, establishing standardized security patterns and automation guardrails, and enabling the secure adoption of cloud services.

Duties and Responsibilities

The successful candidate will:

Secure Cloud Architecture and Design

• Serve as the principal technical authority for secure cloud architecture, designing and validating secure landing zones and reference architectures for AWS and other major public clouds, including Azure and GCP.
• Collaborate with the Senior Security Architect to define and maintain security patterns for common workloads.
• Develop and implement frameworks to detect and remediate architectural drift and maintain alignment with security baselines.

Infrastructure as Code (IaC) and Automation

• Lead the development and maintenance of reusable IaC modules, such as CloudFormation and Terraform.
• Develop and maintain automation scripts using Python, PowerShell and Bash.
• Audit IaC implementations and integrate automated security checks and policy enforcement into CI/CD pipelines.

Cloud Security Controls and Tooling Integration

• Implement and operate cloud security baselines covering identity and access management (IAM), network segmentation, encryption standards and secrets management.
• Integrate and optimise CrowdStrike and other cloud-native security technologies into WIPO environments, including containers and serverless platforms.
• Secure container orchestration platforms such as Kubernetes, EKS, AKS and GKE through image scanning, policy enforcement and runtime protection.
• Collaborate with Application Security (AppSec) and development teams to embed security into the application lifecycle.

Governance, Compliance and Knowledge Management

• Refine and apply cloud governance frameworks, including account structures, tagging standards and security guardrails.
• Develop and maintain technical documentation, including architecture diagrams, standard operating procedures and configuration baselines.
• Create technical guidelines and deliver training and awareness sessions to support ICT and project teams in secure cloud engineering practices.

Other Duties

• Coordinate with vendors and service providers to ensure external solutions meet WIPO’s technical and security requirements.
• Perform other related duties as required.

Requirements

Education (Essential)

• Advanced university degree in Information Security, Computer Science, Engineering, Mathematics, Business or a related discipline.
• A first-level university degree in a relevant discipline, together with two additional years of relevant experience beyond the experience requested below, may be accepted in lieu of an advanced degree.
• AWS Certified Solution Architect Associate certification.

Education (Desirable)

• AWS Certified Security – Specialty.
• Microsoft Certified: Cloud and AI Security Engineer Associate.
• SANS SEC588 Cloud Penetration Testing or equivalent.
• SANS SEC540 Cloud Native Security and DevSecOps Automation or equivalent.
• OSWA OffSec Web Assessor or OSWE OffSec Web Expert.

Experience (Essential)

• A minimum of seven years of experience working in information security in an engineering or analysis capacity.
• At least three years of hands-on experience in cloud security and engineering, with specific expertise in AWS and at least one other major public cloud platform (Azure or GCP).
• Proven experience designing, deploying and operating secure cloud workloads in production environments.
• Demonstrated experience in Infrastructure as Code (IaC) and automation, particularly using Terraform or CloudFormation.
• Practical experience securing container orchestration platforms such as Kubernetes, EKS, AKS and GKE, and integrating security controls into CI/CD pipelines.
• Practical experience with endpoint and workload protection tools, including hands-on experience with the CrowdStrike runtime agent.
• Proven experience designing and operating security controls in production environments, including identity management, network security and encryption.
• Experience working in large, complex or regulated environments, such as international organisations, the public sector or the financial industry.

Experience (Desirable)

• Experience with advanced CrowdStrike capabilities, including Cloud Security (CSPM/CWP), Identity Management and Protection, and/or Next-Gen SIEM.
• Experience in application security (AppSec), secure software development lifecycles (SSDLC) or DevSecOps practices.

Language

• Excellent written and spoken knowledge of English.
• Knowledge of other UN official languages, particularly French, is desirable.

Job-Related Competencies (Essential)

• Deep knowledge of AWS, Azure or GCP security services and configurations.
• Proficiency in scripting using Python, PowerShell or Bash, and IaC frameworks such as Terraform or CloudFormation.
• Knowledge of endpoint and workload protection principles and technologies.
• Familiarity with DevSecOps principles, CI/CD pipelines and security automation.
• Strong analytical, conceptual and problem-solving skills.
• Effective communication skills, including the ability to explain complex technical issues to non-technical stakeholders and produce clear technical documentation.
• Ability to work collaboratively in multicultural and cross-functional teams.
• Strong initiative, ownership and accountability, with a focus on service quality and continuous improvement.
• High integrity, professionalism and discretion when handling sensitive information and systems.
• Ability to provide technical guidance and mentor colleagues and project teams.

Job-Related Competencies (Desirable)

• Proficiency in scripting for security automation and knowledge of SIEM concepts.
• Knowledge of Zscaler SASE architectures and Agile project management methodologies.
• Advanced technical knowledge of the CrowdStrike ecosystem, particularly:
  • CrowdStrike Cloud Security Module (CSPM/CWP).
  • CrowdStrike Identity Management and Protection products.
  • CrowdStrike Next-Gen SIEM capabilities.

Organizational Competencies

1. Communicating effectively.
2. Showing team spirit.
3. Demonstrating integrity.
4. Valuing diversity.
5. Producing results.
6. Showing service orientation.
7. Seeing the big picture.
8. Seeking change and innovation.
9. Developing yourself and others.

Salary Information

The annual salary for Grade P4 is based on the October 2026 post adjustment rate of 80.3%.

• Annual net salary: USD 77,326
• Post adjustment: USD 62,093
• Total annual salary: USD 139,419

Salaries and allowances are paid in Swiss francs at the official United Nations exchange rate. The post adjustment is variable and subject to change.

Additional Information

The temporary appointment is renewable, subject to continuing needs, budget availability and satisfactory performance, up to a maximum cumulative period of two years.

Applications from qualified women, nationals of unrepresented WIPO Member States and nationals of underrepresented geographical regions are encouraged.

WIPO reserves the right to make an appointment at a grade lower than advertised. Shortlisted candidates may be required to provide scanned copies of identification and relevant academic qualifications. Additional testing or interviews may be used as part of the selection process. Initial appointment is subject to satisfactory professional references, and additional background checks may be required.

How to Apply

Interested candidates should submit their applications online through the WIPO recruitment portal before the closing date.

Apply Online: Click here to apply

Application Deadline: 24 November 2026 at 12:59 AM (applicant’s local time).

Comments