Security Architect

We are looking for an experienced Security Architect to define, review, and govern enterprise security architecture across business applications, infrastructure, cloud platforms, and technology initiatives.

The role focuses on embedding security into solution design, performing architecture assessments, defining security standards, and ensuring security controls align with business objectives, risk requirements, and industry best practices.

The successful candidate will provide security architecture guidance across hybrid and multi-cloud environments and work closely with technology teams, business stakeholders, and leadership teams.

Key Responsibilities

• Define and maintain enterprise security architecture frameworks, standards, reference architectures, and security design principles using TOGAF/SABSA methodologies.
• Review and approve security designs, HLDs, LLDs, solution architectures, technical proposals, and architecture documentation.
• Ensure security-by-design and security-by-default principles are applied across new technology initiatives.
• Conduct security architecture reviews, threat modelling, risk assessments, and design evaluations for enterprise solutions.
• Assess and improve existing platforms, applications, infrastructure, and security controls based on security standards and best practices.
• Design and review security architectures across IAM, network security, cloud security, endpoint security, email security, and SIEM/SOAR platforms.
• Evaluate Microsoft Azure, hybrid cloud, multi-cloud, and VMware environments to ensure secure architecture implementation.
• Identify security gaps, provide remediation recommendations, and support security improvement initiatives.
• Support internal and external audits by ensuring security architecture documentation, controls, and evidence are maintained.
• Provide technical guidance to architects, engineering teams, and business stakeholders on secure technology decisions.

Required Skills & Experience

• 10–12 years of experience in cybersecurity architecture, enterprise security design, or security consulting.
• TOGAF and/or SABSA certification.
• Strong understanding of enterprise security architecture principles, Zero Trust, and security-by-design approaches.
• Experience designing and reviewing security solutions across:
• IAM platforms including SailPoint, IBM IAM, Imprivata, SSO, MFA, PAM, and access governance.
• Network security platforms including Fortinet, Palo Alto Networks, Cisco ASA, VPN technologies, and network segmentation.
• Cloud security platforms including Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Intune, Microsoft Purview, and Defender XDR.
• Endpoint and email security solutions including Microsoft Defender for Endpoint, Proofpoint, Trend Micro, and Microsoft Exchange Online Protection.
• Experience preparing HLDs, LLDs, security architecture diagrams, technical designs, and security recommendations.
• Strong knowledge of threat modelling, risk assessment methodologies, security controls, and architecture governance.
• Experience evaluating security solutions across hybrid and multi-cloud environments.

Preferred Skills

• CISSP, CCSP, or Azure Security certification.
• Experience with VMware security architecture.
• Knowledge of security frameworks including ISO 27001, NIST, SOC 2, and PCI-DSS.
• Experience with SIEM/SOAR integration and security operations processes.
• Exposure to DevSecOps practices and secure software development lifecycle.
• Strong communication, documentation, presentation, and stakeholder management skills.