Azure Cloud Solution Architect with Cyber Security || Bangalore

Cloud Solution Architect with Cybersecurity Expertise (Azure)

Role Overview

Azure Solutions Architect with Cybersecurity Specialization

Key Responsibilities

• Solution Architecture Design & Strategy

  Lead the design and architecture of

  end-to-end Azure solutions

  , ensuring alignment with business objectives. Work across cloud infrastructure (compute, storage, networking) and cloud-native services while embedding security at every layer of the architecture.

• Cybersecurity Integration

  Integrate

  cybersecurity best practices

   into cloud designs by leveraging Azure’s native security tools and services such as

  Azure Security Center

  ,

  Azure Sentinel

  ,

  Azure Active Directory (AAD)

  ,

  Azure Firewall

  , and

  Azure Key Vault

  . Implement role-based access controls (RBAC), secure data management, and encryption strategies.

• Identity & Access Management

  Design and implement

  Azure Active Directory

   strategies, including

  Conditional Access

   policies,

  Multi-Factor Authentication (MFA)

  , and

  Identity Protection

  . Ensure proper identity management and access control for all users and services in the Azure environment.

• Security & Compliance Management

  Architect cloud environments that adhere to global and industry-specific standards such as

  GDPR

  ,

  HIPAA

  ,

  PCI-DSS

  , and

  SOC 2

  . Leverage

  Azure Policy

  ,

  Azure Blueprints

  , and

  Compliance Manager

   to enforce governance and compliance in Azure environments.

• Threat Detection & Prevention

  Implement proactive security measures for threat detection and prevention using

  Azure Sentinel

   (SIEM),

  Microsoft Defender for Cloud

  , and

  Azure DDoS Protection

  . Monitor and respond to security alerts to mitigate risks.

• Cloud Security Posture Management (CSPM)

  Continuously assess the

  cloud security posture

   and implement solutions for continuous monitoring, automated remediation, and threat mitigation using tools like

  Azure Security Center

   and

  Microsoft Defender for Cloud

  .

• Network Security Architecture

  Design

  secure network architectures

   using

  Azure Virtual Networks (VNet)

  ,

  Network Security Groups (NSG)

  ,

  Azure Firewall

  ,

  Application Gateway

  , and

  Azure Bastion

   to secure inbound and outbound traffic and ensure that data transfers are encrypted.

• Disaster Recovery & Business Continuity

  Implement

  disaster recovery

   (DR) strategies and

  business continuity

   plans using

  Azure Site Recovery

  ,

  Azure Backup

  , and other Azure-native solutions. Ensure the architecture supports

  high availability

   and

  resilience

  .

• Incident Response & Remediation

  Lead incident response efforts in the event of a security breach. Implement procedures for rapid detection, containment, and remediation of security vulnerabilities.

• Collaboration & Stakeholder Management

  Collaborate with key stakeholders, including development, operations, security, and compliance teams, to define solution architectures. Provide guidance and training to teams on Azure security best practices and threat mitigation techniques.

• Documentation & Knowledge Sharing

  Maintain up-to-date technical documentation for architecture designs, security configurations, and deployment processes. Share knowledge of emerging cybersecurity threats and solutions to improve the overall security posture.

• Legal Matters

  ,

  Coordinating with Infosec team regarding security events.

• Forensic Methods in identifying root cause, Containments Method to isolate infected resources.

Required Qualifications & Skills

• Bachelor’s degree

   in Computer Science, Cybersecurity, Information Technology, or related field, or equivalent work experience.

• 10+ years

   of experience in cloud architecture, with a focus on Azure solutions.
• In-depth knowledge of

  Azure services

   and security tools, including

  Azure Active Directory

  ,

  Azure Security Center

  ,

  Azure Sentinel

  ,

  Microsoft Defender for Cloud

  ,

  Azure Key Vault

  , and

  Azure Firewall

  .
• Strong understanding of

  cloud security concepts

   such as identity management, encryption, access control, and threat mitigation in an Azure environment.
• Expertise in implementing

  compliance and governance frameworks

   within Azure (e.g.,

  Azure Policy

  ,

  Azure Blueprints

  ,

  Azure Compliance Manager

  ).
• Solid experience with

  network security

   in the cloud, including

  Virtual Networks

  ,

  Network Security Groups (NSG)

  ,

  Application Gateway

  , and

  Azure Firewall

  .
• Experience in

  Identity and Access Management (IAM)

  , including configuration of

  RBAC

  ,

  MFA

  , and

  conditional access

   in

  Azure Active Directory

  .
• Proficiency in

  Infrastructure as Code (IaC)

   using tools like

  Terraform

  ,

  Azure ARM Templates

  , or

  Bicep

   to automate security configuration and cloud deployments.
• Hands-on experience with

  cybersecurity threat detection

   using tools like

  Azure Sentinel

   and

  Microsoft Defender for Cloud

  .
• Ability to troubleshoot and resolve complex security and network issues in an Azure environment.
• Strong communication skills, including the ability to document and communicate complex architectural and security concepts to stakeholders at all levels.

Preferred / Nice-to-Have Skills

• Certifications

  :

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)

• Certified Information Systems Security Professional (CISSP)

• Certified Cloud Security Professional (CCSP)

• Microsoft Certified: Azure Architect Design (AZ-305)

• Experience in

  multi-cloud security

   architecture involving Azure and other platforms (AWS, GCP).
• Familiarity with

  DevOps

   and

  CI/CD

   pipeline security in Azure, utilizing

  Azure DevOps

  ,

  GitHub Actions

  , or other automation tools for secure deployments.
• Experience with

  Kubernetes

  ,

  container security

  , and

  Azure Kubernetes Service (AKS)

  .
• Knowledge of

  Serverless architectures

   (e.g.,

  Azure Functions

  ,

  Logic Apps

  ) and their security concerns.
• Familiarity with

  Zero Trust Architecture

   (ZTA) and its implementation in cloud environments.