Security Architect

Security Architect

We are seeking a Security Architect to design, build, and implement scalable and secure cybersecurity architectures across cloud, application, and infrastructure environments. As a trusted advisor to C-level security leaders, you will define zero-trust architectures, identity and access controls, security automation frameworks, and risk-based security strategies. This is a strategic yet hands-on role, requiring deep expertise in cloud security, DevSecOps automation, penetration testing, risk compliance, and AI-powered security analytics.

Key Responsibilities

• Lead the design and implementation of security architectures across cloud, application, and infrastructure environments to ensure a robust and scalable security posture.
• Define zero-trust security frameworks, ensuring least privilege access, identity governance, and strong authentication mechanisms.
• Develop security transformation strategies and roadmaps aligned with industry best practices and regulatory requirements such as NIST, ISO 27001, SOC 2, PCI-DSS, GDPR, and HIPAA.
• Conduct security risk assessments and gap analyses to identify vulnerabilities, misconfigurations, and areas for security improvement.
• Design and implement cloud security strategies to protect workloads in AWS, Azure, and GCP, ensuring compliance with industry standards.
• Deploy and manage security controls such as CSPM (Cloud Security Posture Management), CNAPP (Cloud-Native Application Protection Platform), SIEM, and SOAR for enhanced threat detection and response.
• Oversee identity and access management (IAM) implementations, including privileged access management (PAM), just-in-time (JIT) access, and multi-factor authentication (MFA).
• Integrate security best practices into DevSecOps pipelines, implementing security automation, policy-as-code, and vulnerability management within CI/CD workflows.
• Ensure secure software development practices by embedding SAST, DAST, RASP, SBOM, and API security testing within the SDLC lifecycle.
• Perform penetration testing and red teaming exercises to simulate real-world attack scenarios and improve security defenses.
• Optimize security monitoring and response capabilities, leveraging SIEM, XDR, and AI-driven anomaly detection for real-time threat intelligence.
• Develop and implement enterprise-wide security governance frameworks, ensuring compliance with cybersecurity policies and industry regulations.
• Lead security architecture discussions with key stakeholders, including CISOs, CTOs, and Heads of Engineering, to align security strategies with business objectives.
• Support incident response and forensic investigations, ensuring quick remediation and prevention of future breaches.
• Define cloud-native security frameworks to protect containerized applications, Kubernetes environments, and serverless architectures.
• Conduct security workshops and technical assessments to help clients strengthen their security postures.
• Work closely with compliance teams to implement continuous security monitoring, audit readiness, and automated reporting mechanisms.
• Collaborate with business and sales teams to provide security consulting for enterprise clients, contribute to security RFPs, and identify new business opportunities in cybersecurity transformation.

Required Qualifications & Experience Technical Expertise

• 10+ years of experience in Cybersecurity Engineering, Security Architecture, or DevSecOps
• Expertise in cloud security controls for AWS, Azure, GCP
• Strong knowledge of IAM, zero-trust architectures, and identity governance models
• Hands-on experience in DevSecOps automation, CI/CD security, and software supply chain security
• Experience with SIEM/XDR solutions, threat intelligence, and risk-based security analytics
• Strong knowledge of penetration testing, vulnerability assessments, and application security hardening.

Consulting & Leadership Skills

• Ability to lead security assessments and define security transformation strategies for enterprise clients
• Strong client engagement & stakeholder management skills, with experience working directly with CISOs, security teams, and engineering leaders
• Experience in driving security workshops, risk assessments, and compliance readiness consulting
• Ability to translate complex security risks into business-aligned solutions.

Preferred Qualifications

• Certifications: CISSP, CISM, CISA, AWS/Azure Security Specialty, CCSP, CEH, OSCP
• Experience in AI security, GenAI governance, and LLM security best practices
• Hands-on expertise in policy-as-code, Kubernetes security, and API security
• Strong knowledge of cyber resilience, disaster recovery, and risk-based security frameworks