Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Identity Access Management (IAM)
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education
Security Delivery Senior Analyst (Active Directory & Microsoft Azure Identity) — As a Security Delivery SME, you will have the opportunity to lead and deliver strategic identity and access management programs, enabling clients to securely transform their capabilities in cloud and hybrid environments. Key Responsibilities - Lead the delivery of complex security projects including architecture, design, and implementation of large-scale Active Directory (AD) and Azure Active Directory (AAD) solutions, migrations, upgrades, and integration initiatives. - Oversee technical health assessments of AD/AAD platforms to ensure resilience, security, and readiness for cloud enablement and digital transformation. - Guide clients on best practices in modern Microsoft Identity solutions—MFA, Conditional Access, SSO, B2B/B2C, PAM/PIM, and legacy app integration. - Manage and execute B2B, B2C, SAML, OAUTH, and OpenID Connect integrations for client and partner environments. - Coordinate the cleanup, restructuring, and modernization of AD and ensure readiness for Office 365, Azure, and hybrid cloud services. - Deliver cloud security and compliance configurations, reporting, and advanced threat protection solutions on Microsoft platforms. - Troubleshoot and resolve technical issues in AD/AAD ecosystems, collaborating closely with product vendors (Microsoft) and client stakeholder teams. - Implement enterprise security best practices, conduct technical health checks, perform risk assessments, and define remediation plans for emerging threats. - Serve as subject matter expert for AD/AAD security, identity governance, and integrations across multi-vendor, multi-protocol network landscapes. - Maintain project documentation, manage client communications, and champion risk mitigation strategies throughout project lifecycles. - Support managed services operations and provide ongoing technical mentoring and training for internal teams. - Contribute to knowledge development, process improvement, and eminence-building activities (e.g., thought leadership, whitepapers, and best-practice guidelines in IAM and cloud security). Qualifications - 8+ years of technical consulting and delivery leadership in enterprise security, with in-depth, hands-on expertise in Microsoft identity solutions—Azure Active Directory (including Premium), Active Directory, Conditional Access, SSO, MFA, PIM/PAM, and third-party IAM integrations. Proven experience designing and implementing modern, scalable AD/AAD for large organizations, including cloud and application integrations. - Demonstrated proficiency with authentication and federation protocols (SAML, OAUTH, OpenID Connect, WS-Fed) and modern Microsoft security services. - At least 4 years working with public cloud security (preferably Azure) and advanced threat protection technologies. - Strong analytical, troubleshooting, and documentation skills across dynamic, multi-customer environments. - A Bachelor’s or Master’s degree (BE/BTech/BCA/MCA) in Computer Science, Cybersecurity, Information Technology, or allied disciplines. Preferred certifications: Microsoft role-based (Azure, Security Engineer), CISSP, CISM, CCSP, MCSE, MCSA.