Cloud Security Architect

Job Description: Cloud Security Architect

Job Title: Cloud Security Architect

Location: Hyderabad

Role Summary

The Cloud Security Architect will be responsible for designing, architecting, deploying, delivering, and maintaining enterprise-grade cloud security solutions across Azure, AWS, and Google Cloud environments. The role ensures alignment with organizational security policies, compliance requirements, and industry best practices while enabling secure and resilient business operations in multi-cloud ecosystems.

Key Responsibilities

1. Architecture & Design

- Define and design Cloud Security Reference Architectures and patterns for Azure, AWS, and GCP.
- Translate Business, Compliance, Security, Privacy and Risk requirements into secure technical solutions.
- Establish Cloud Security Standards, Guardrails, and best practices.

1. Deployment & Delivery

- Lead the implementation of Cloud-native Security Services (e.g., Azure Defender, AWS Security Hub, GCP Security Command Center).
- Integrate Cloud Security Solutions with enterprise security platforms (e.g., SIEM, SOAR, IAM, PAM).
- Conduct security configuration, hardening, and automated deployment using IaC tools (Terraform, Bicep, Ansible, PowerShell and CloudFormation).

1. Operations & Maintenance

- Maintain and continuously improve cloud security services, including Monitoring, Logging, Incident response, and Vulnerability management.
- Manage upgrades, patches, and ongoing Optimization of Cloud Security Controls.
- Support Disaster Recovery, Data Protection, and Compliance monitoring.

1. Governance & Compliance

- Ensure Adherence to Regulatory Frameworks (ISO 27001, SOC 2, NIST, HIPAA, PCI DSS, CIS, GDPR, etc.).
- Conduct cloud security risk assessments, Threat Modelling, and audits.
- Drive alignment with Zero Trust and Secure-by-design principles.

1. Collaboration & Advisory

- Partner with Cloud Engineering, CloudOps, DevOps, and Application teams to embed security in solution design.
- Provide Subject matter Expertise and Guidance to stakeholders on emerging threats, technologies, and security capabilities.
- Lead Knowledge Sharing, Security Awareness, and Training for teams.

Required Skills & Experience

- Proven experience (15+ years) in information security with at least 5+ years in cloud security architecture.
- Hands-on expertise in Azure, AWS, and GCP cloud platforms.
- Strong knowledge of cloud-native security services (IAM, encryption, key management, logging, monitoring, WAF, container security).
- Proficiency with IaC (Terraform, ARM, Bicep, Ansible, PowerShell, CloudFormation etc) and DevSecOps integration.
- Deep understanding of network security, identity management, application security, and data protection in the cloud.
- Familiarity with compliance standards (CIS & CSA, NIST CSF, PCI DSS, HIPAA, GDPR).
- Experience in designing and implementing Zero Trust and multi-cloud security frameworks.

Preferred Qualifications

- Academic qualifications: Engineering Graduate / Postgraduate
- Worked with US clients within BFSI & Healthcare Sectors, in EST / CST
- Professional certifications such as:
- Microsoft Certified: Cybersecurity Architect Expert
- AWS Certified Security – Specialty
- Google Professional Cloud Security Engineer
- CISSP, CCSP, CISM, or equivalent
- Experience in container and Kubernetes security.
- Knowledge of automation, scripting, and security orchestration.

Competencies

- Strong problem-solving and analytical thinking.
- Excellent communication and stakeholder management.
- Ability to balance security requirements with business agility.
- Strategic mindset with hands-on delivery capability.

---