Technical Security Architect

Job Description

Role: Security Architect

Location: india

Who are we looking for?

Our client requires a Security Architect with GRC experience

We are seeking an experienced Cybersecurity Architect to join our cybersecurity delivery team in India. This role is crucial for managing and securing all aspects of our clients' digital environments, including cloud platforms (Azure, AWS, GCP) and a wide range of security streams such as Identity and Access Management (IAM), Governance, Risk, and Compliance (GRC), Email Security, Endpoint Detection and Response (EDR), and more. The ideal candidate will bring deep technical expertise, strategic thinking, and leadership skills to deliver comprehensive security solutions for our diverse client base.

Position Summary:

• 10-15 years of experience in Information Technology
• At least 8 years of experience in Information Security, Security Architect and/or Engineering
• At least 3 years of experience with Microsoft Azure Security and a thorough understanding of Microsoft Solutions
• Experience in designing, implementing, and delivering security for cloud native, distributed computing and architectural solutions with a principle of “Secure by Design”
• Identify and deliver appropriate controls based on industry standards to drive cloud and customer security solutions framework based on business risk and cloud native threats
• Design, develop and implement security architectures and designs for cloud and cloud/hybrid-based systems with a minimal degree of risk to the organization
• Collaborate with Business, IT security and IT Operations personnel to implement group level security plans, policies, and procedures
• Expertise in performing Threat Modelling, generating security architectural requirements to software development and product teams
• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within SaaS, IaaS, PaaS, and other cloud environments
• Review and provide governance oversight for Change Management
• Develop and maintain documentation of playbooks and procedures
• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc) and experience with IAM, MFA, PIM/PAM, SSO for cloud and custom IDPs
• Experience in defining Security Zones in Azure environment, create Firewall rules for DMZ, knowledge on Infrastructure Management, Application and Data Domains
• Experience in Backup and Data loss strategy, creating and automating an incident response plan, monitoring for security events, and application security testing
• High level knowledge in IDS/IPS, SIEM and SOAR
• Ability to create, contribute, and implement best practices of Security
• Governance, Framework and Standard Exposure (ISO, NIST, OWASP, GDPR, HIPAA, PCI DSS, ITIL)
• Knowledge and understanding of global security policies
• Costings for security solutions
• Architecting a high-level solution and documentation
• Detailed high-level and low-level solution design and documentation

Key Responsibilities:

• Design & Architecture:
  • Architect and implement secure multi-cloud environments across Azure, AWS, and GCP, tailored to the specific needs of various customers.
  • Develop security architectures for critical security domains, including IAM, GRC, Email Security, EDR, network security, and data protection.
  • Ensure security designs comply with industry standards and regulatory requirements such as GDPR, ISO 27001, and PCI-DSS.
• Leadership & Collaboration:
  • Lead cross-functional teams of security engineers, analysts, and specialists, ensuring seamless integration of security controls across all environments.
  • Collaborate with customer stakeholders, project managers, and other internal teams to align security strategies with business objectives.
  • Act as a senior advisor to clients, providing expert guidance on all aspects of cybersecurity and risk management.
• Security Operations:
  • Oversee the implementation and management of security technologies, including IAM, EDR, email security solutions, and GRC tools.
  • Conduct security assessments, vulnerability management, and incident response across multiple security domains and cloud environments.
  • Develop, implement, and refine security monitoring and incident response procedures to detect and respond to threats efficiently.
• Innovation & Strategy:
  • Stay ahead of emerging security threats and technologies, integrating the latest security innovations into existing and future architectures.
  • Develop and implement security strategies that support business goals and enhance the overall security posture of our clients.
  • Drive continuous improvement initiatives, ensuring the security processes, tools, and methodologies remain cutting-edge.
• Compliance & Risk Management:
  • Ensure that all security solutions meet compliance requirements and are aligned with industry best practices.
  • Lead risk assessments and develop mitigation strategies for identified vulnerabilities and risks.
  • Prepare and deliver detailed security reports to clients, senior management, and regulatory bodies, as required.

Qualifications Required

Due to the technical nature of the position and the requirements to relate to a broad spectrum of technologies, a bachelor’s degree from an accredited university and equivalent of ten years’ experience in security related activity is required. 

• Experience in procedure and report writing is required
• Strong verbal, interpersonal, and communication skills required
• The ability to work independently and as a team member exercising good judgment and responsibility is required
• Excellent computer skills, including proficiency with MS-Office software, are required
• Familiarity with insurance & financial industry IT operations will be added advantage

·Bachelor's or Master's degree in Computer Science, Information Security, or a related field.

• Other Certifications - Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), Microsoft Certified, CSP Security Certifications – Azure, AWS Certified Solutions Architect, Professional Cloud Architect – Google.