Cloud Security Architect

Job Title:

Location:

Role Summary

The Cloud Security Architect will be responsible for designing, architecting, deploying, delivering, and maintaining enterprise-grade cloud security solutions across Azure, AWS, and Google Cloud environments. The role ensures alignment with organizational security policies, compliance requirements, and industry best practices while enabling secure and resilient business operations in multi-cloud ecosystems.

Key Responsibilities

1. Architecture & Design

• Define and design

  Cloud Security Reference Architectures

  and patterns for Azure, AWS, and GCP.
• Translate

  Business, Compliance, Security, Privacy and Risk requirements

  into secure technical solutions.
• Establish

  Cloud Security Standards, Guardrails

  , and best practices.

1. Deployment & Delivery

• Lead the implementation of

  Cloud-native Security Services

  (e.g., Azure Defender, AWS Security Hub, GCP Security Command Center).

• Integrate Cloud Security Solutions

  with enterprise security platforms (e.g., SIEM, SOAR, IAM, PAM).
• Conduct security configuration, hardening, and automated deployment using IaC tools (

  Terraform, Bicep, Ansible, PowerShell and CloudFormation

  ).

1. Operations & Maintenance

• Maintain and continuously improve cloud security services, including

  Monitoring, Logging, Incident response, and Vulnerability management

  .
• Manage upgrades, patches, and ongoing

  Optimization of Cloud Security Controls

  .
• Support

  Disaster Recovery, Data Protection, and Compliance

  monitoring.

1. Governance & Compliance

• Ensure

  Adherence to Regulatory Frameworks

  (ISO 27001, SOC 2, NIST, HIPAA, PCI DSS, CIS, GDPR, etc.).
• Conduct cloud security risk assessments,

  Threat Modelling

  , and audits.
• Drive alignment with

  Zero Trust

  and

  Secure-by-design

  principles.

1. Collaboration & Advisory

• Partner with Cloud Engineering, CloudOps, DevOps, and Application teams

  to embed security in solution design.

• Provide Subject matter Expertise and Guidance

  to stakeholders on emerging threats, technologies, and security capabilities.
• Lead

  Knowledge Sharing, Security Awareness, and Training

  for teams.

Required Skills & Experience

• Proven experience (15+ years) in information security with at least 5+ years in cloud security architecture.
• Hands-on expertise in Azure, AWS, and GCP cloud platforms.
• Strong knowledge of cloud-native security services (IAM, encryption, key management, logging, monitoring, WAF, container security).
• Proficiency with IaC (Terraform, ARM, Bicep, Ansible, PowerShell, CloudFormation etc) and DevSecOps integration.
• Deep understanding of network security, identity management, application security, and data protection in the cloud.
• Familiarity with compliance standards (CIS & CSA, NIST CSF, PCI DSS, HIPAA, GDPR).
• Experience in designing and implementing Zero Trust and multi-cloud security frameworks.

Preferred Qualifications

• Academic qualifications: Engineering Graduate / Postgraduate
• Worked with US clients within BFSI & Healthcare Sectors, in EST / CST
• Professional certifications such as:
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Certified Security – Specialty
• Google Professional Cloud Security Engineer
• CISSP, CCSP, CISM, or equivalent
• Experience in container and Kubernetes security.
• Knowledge of automation, scripting, and security orchestration.

Competencies

• Strong problem-solving and analytical thinking.
• Excellent communication and stakeholder management.
• Ability to balance security requirements with business agility.
• Strategic mindset with hands-on delivery capability.