Bilingual Cybersecurity Technical Architect – AWS Cloud Platforms

Positions: 1 full-time, permanent position

Experience: 11–15 years

Role

As part of a strategic healthcare digital transformation initiative, we are seeking a highly skilled bilingual cybersecurity specialist to work onsite at a client location in Japan. You will work closely with Japanese stakeholders to design, implement, and maintain secure cloud infrastructure for digital healthcare solutions.

Responsibilities

• Lead the design of cybersecurity architectures for AWS cloud-based digital platforms and enterprise applications.
• Define and implement secure cloud architectures, network security, IAM strategies, encryption, log management, monitoring, and compliance controls in AWS.
• Collaborate with customer engineering, infrastructure, DevOps, and application development teams to integrate security throughout the SDLC.
• Conduct security risk assessments, threat modeling, vulnerability analysis, and security reviews for cloud-native applications and microservices.
• Develop and promote cloud security best practices, governance policies, and secure coding guidelines.
• Design and support security solutions using AWS services such as IAM, GuardDuty, Security Hub, WAF, Shield, CloudTrail, KMS, and Inspector.
• Support DevSecOps pipelines, container security, CI/CD security, and Kubernetes/EKS security measures.
• Participate in architecture discussions, customer meetings, and technical proposal activities with Japanese stakeholders.
• Analyze security incidents and support countermeasure proposals and root-cause investigations.
• Help ensure compliance with cybersecurity standards, data protection requirements, and industry regulations.
• Act as a technical bridge between onsite customer teams and offshore/global development teams.
• Create architecture and security design documents, operational guidelines, and technical reports.

Team

The onsite team includes several Quest Global employees with multiple years of experience.

Why work with us?

• Work with a major medical device manufacturer: Support leading Japanese companies developing advanced medical devices.
• Work on cutting-edge projects: Opportunities include AI-based defect detection, precision imaging, micro-pattern inspection, and distributed computing environments.
• Use your bilingual skills: Japanese proficiency at JLPT N2 or higher is welcome. You can contribute as a bridge between global teams.
• Build your career: Access ongoing learning, certification, and cross-disciplinary opportunities in medical device manufacturing.
• Work in a global environment: Collaborate across onsite teams in Japan and offshore teams in India.

Growth opportunities

This role offers a career path to positions such as Senior Architect and Principal Architect. Depending on your interests, opportunities may also be available in other departments and functions, including sales, delivery, and leadership.

Location

Harumi, Chuo-ku, Tokyo, Japan

Required qualifications

• More than 10 years of practical experience in cybersecurity, cloud security, or enterprise security architecture.
• Extensive practical experience with AWS and AWS security services.
• Experience designing secure architectures for cloud-native applications, APIs, microservices, and distributed systems.
• Knowledge of IAM, zero-trust architecture, network security, VPNs, firewalls, encryption, PKI, and security monitoring.
• Experience with DevSecOps, CI/CD security, container security, Kubernetes/EKS security, and Infrastructure as Code (Terraform/CloudFormation).
• Knowledge of security standards and frameworks such as ISO 27001, NIST, CIS, SOC 2, OWASP, and GDPR.
• Experience with threat modeling, vulnerability assessment, penetration-testing support, and security audits.
• Strong understanding of Linux/Windows server security and cloud networking.
• Experience with log-monitoring tools such as CloudWatch, Splunk, ELK, and Prometheus/Grafana.
• Strong problem-solving, communication, and stakeholder-management skills.
• Business-level English communication skills.
• Ability to collaborate with Japanese customers and offshore/global teams.

Preferred qualifications

• AWS certifications such as AWS Certified Security – Specialty or AWS Certified Solutions Architect – Professional.
• Security certifications such as CISSP, CISM, CEH, CCSP, or CompTIA Security+.
• Experience in the medical, medical-device, semiconductor, or other regulated industries.
• Knowledge of medical security standards and regulations such as HIPAA, IEC 62304, ISO 14971, MDR, and FDA cybersecurity guidelines.
• Experience with SIEM/SOAR platforms and incident-response automation.
• Experience in multicloud or hybrid cloud environments (Azure/GCP).
• Practical experience with SAST, DAST, container scanning, and security automation tools.
• Understanding of AI/ML security and data privacy in cloud platforms.
• Experience with global delivery or offshore development models.

Language skills

• English: Business level
• Japanese: JLPT N2 or higher

Compensation and benefits

• Annual salary increase. For contract employees, salary is reviewed at contract renewal.
• Commuting allowance of up to ¥20,000 per month.
• Annual salary paid in 12 monthly installments.
• Overtime pay.
• Comprehensive social insurance coverage, including employees’ pension insurance, health insurance (TJK: Tokyo Information Service Industry Health Insurance Association), employment insurance, and workers’ accident compensation insurance.
• Health checkups, including checkups for dependents, comprehensive medical checkups, and gynecological examinations.
• Mandatory retirement age of 65; no mandatory retirement age for managerial positions.
• Online in-house training program.
• Three-month trial period, with no changes to duties or benefits.
• Indoor smoking is prohibited.

Holidays and leave

• More than 120 days of annual leave.
• Two-day weekends (Saturday and Sunday).
• Year-end and New Year holidays.
• Paid leave, maternity leave, childcare leave, nursing-care leave, and bereavement leave.

Holidays and leave may vary depending on the client site.