Job
Description
About The Role
Project Role :Security Architect
Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Cloud Security Architecture
Good to have skills :NA
Minimum 7.5 year(s) of experience is required
Educational Qualification :15 years full time education
Summary:As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting the implementation of cloud security controls, and transitioning to cloud security-managed operations. You will engage in discussions to refine security strategies and ensure compliance with industry standards, all while adapting to the evolving landscape of cloud technologies and threats.
Roles & Responsibilities:1.Cloud Security Assessments
Perform comprehensive assessments for applications hosted in AWS, Azure, GCP environments including Gen AI applications Evaluate configurations, IAM policies, network segmentation, encryption, logging, and monitoring. Conduct threat modeling and risk analysis for critical workloads. Map findings to compliance frameworks (e.g., NIST 800-53, ISO 27001, CIS Benchmarks).2.Cloud Service Hardening Harden services including compute (VMs, containers), storage (S3, Blob), databases (RDS, Cosmos DB), and IAM. Implement secure defaults, encryption, access controls, and audit logging. Develop Infrastructure-as-Code (IaC) templates for consistent deployment of hardened services.3.Cloud Security Posture Management (CSPM) Deploy and configure CSPM tools (e.g., Wiz). Integrate with cloud accounts for real-time posture monitoring. Define custom policies, alerts, and dashboards for continuous compliance.4.Cloud Security Guardrails Design and implement preventive guardrails using AWS SCPs, Azure Policies, GCP Organization Policies. Create detective controls using native logging and monitoring tools (e.g., CloudTrail, Azure Monitor). Automate remediation workflows using Lambda, Azure Functions, or GCP Cloud Functions.5. Enterprise VM Image Assessment. Assessment of VM images for vulnerabilities, misconfigurations, and compliance. Assessment of images for production use and maintain a secure image repository. Automate image scanning and approval workflows using tools like Packer, Hashi Corp Sentinel.6. Expected to be an SME.7. Collaborate and manage the team to perform.8. Responsible for team decisions.9. Engage with multiple teams and contribute on key decisions.10. Provide solutions to problems for their immediate team and across multiple teams.11. Facilitate training sessions to enhance team knowledge on cloud security best practices.12. Evaluate and recommend new security technologies to improve the overall security posture.
Professional & Technical
Skills:
Must To Have
Skills:
Proficiency in Cloud Security Architecture. Strong understanding of cloud service models and security implications. Experience with security frameworks such as NIST, ISO, or CIS. Knowledge of identity and access management solutions. Familiarity with compliance regulations related to cloud security.
Additional Information: The candidate should have minimum 7.5 years of experience in Cloud Security Architecture. This position is based at our Bengaluru office. A 15 years full time education is required.
Qualification15 years full time education
