Cyber Security Architect

Job Summary

Job Title: Enterprise Security Architect
Experience: 6 to 12 Years
Location: Mumbai
Employment Type: Full-Time

About the Role

We are looking for an experienced Enterprise Security Architect with strong expertise in security architecture, cybersecurity strategy, risk management, cloud security, and enterprise infrastructure protection. The ideal candidate will have hands-on experience designing and implementing enterprise security solutions, developing security roadmaps, conducting architecture assessments, and ensuring alignment with business objectives, regulatory requirements, and organizational security standards.

The role requires in-depth knowledge of enterprise security technologies, cloud and Zero Trust architectures, Identity and Access Management (IAM), and emerging AI security and infrastructure risks. The candidate should possess strong stakeholder management, financial planning, vendor evaluation, and program management capabilities to drive security initiatives across the organization.

Key Responsibilities

• Develop and maintain enterprise security strategies, architecture frameworks, and multi-year security roadmaps aligned with business objectives.
• Lead security architecture reviews, solution assessments, threat modeling, and risk assessments for enterprise applications, infrastructure, and cloud environments.
• Design and implement security solutions across firewalls, IPS, WAF, SIEM, EDR, DLP, NAC, and other enterprise security platforms.
• Define and drive cloud security strategies across Azure and AWS environments, including Zero Trust architecture and secure cloud adoption.
• Establish and enhance Identity and Access Management (IAM) capabilities, including Active Directory, LDAP, Azure AD/Entra ID, and Identity Threat Detection and Response (ITDR).
• Evaluate emerging AI security risks, including AI infrastructure security, data protection, access controls, model security, and governance requirements.
• Drive architecture assurance, security control validation, vulnerability management, and remediation planning across enterprise environments.
• Collaborate with infrastructure, network, application, cloud, risk, compliance, and business teams to embed security into technology initiatives.
• Evaluate security vendors, technologies, and solutions based on technical suitability, total cost of ownership (TCO), return on investment (ROI), and business value.
• Manage security programs, budgets, implementation timelines, dependencies, and stakeholder expectations.
• Define security standards, reference architectures, policies, and implementation guidelines to support consistent security practices.
• Assess OT/IoT security requirements and contribute to securing industrial and connected environments.
• Present security risks, architecture recommendations, investment proposals, and roadmap progress to senior management and executive stakeholders.
• Stay updated on emerging cyber threats, security technologies, regulatory requirements, and industry best practices.

Required Technical Skills

Security Architecture & Strategy: Strong knowledge of enterprise security architecture, security frameworks, reference architectures, security strategy development, and roadmap planning.

Enterprise Security Technologies: Hands-on experience with firewalls, Intrusion Prevention Systems (IPS), Web Application Firewalls (WAF), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Data Loss Prevention (DLP), and Network Access Control (NAC).

Cloud & Zero Trust Security: Experience designing and assessing security architectures for Microsoft Azure and AWS, along with Zero Trust principles and solutions such as Zscaler.

Identity & Access Management: Strong understanding of Active Directory (AD), LDAP, Azure AD/Microsoft Entra ID, identity governance, privileged access concepts, and Identity Threat Detection and Response (ITDR).

Architecture Assurance & Risk Management: Experience in security assessments, threat modeling, vulnerability management, risk analysis, security control validation, and remediation governance.

AI Security & AI Infrastructure: Understanding of AI/ML security risks, AI infrastructure protection, data security, access control, secure AI deployment, and emerging AI governance requirements.

IT Infrastructure Security: Good understanding of enterprise networks, operating systems, databases, virtualization, containers, and infrastructure security controls.

OT/IoT Security: Exposure to industrial and operational technology security solutions such as Claroty, Nozomi Networks, and SCADAfence.

Governance & Stakeholder Management: Ability to develop security policies and standards, manage cross-functional stakeholders, communicate risks to leadership, and drive security initiatives across teams.

Financial & Program Management: Experience with TCO analysis, ROI assessment, vendor evaluation, budgeting, project planning, and program delivery.

Required Competencies

• Strong analytical, problem-solving, and strategic thinking abilities.
• Excellent understanding of enterprise security risks and business impact.
• Strong communication and executive presentation skills.
• Ability to translate complex technical risks into actionable business recommendations.
• Proven stakeholder engagement and cross-functional collaboration capabilities.
• Strong ownership of security initiatives, delivery timelines, and risk mitigation plans.
• Effective vendor management, negotiation, and technology evaluation skills.
• Ability to balance security requirements, operational efficiency, business priorities, and cost optimization.
• Adaptability to evolving cybersecurity threats, cloud technologies, and AI security challenges.

Educational Qualification

BE/B.Tech in Computer Science, Information Technology, Cybersecurity, or an equivalent bachelor's degree. Relevant postgraduate qualifications and industry-recognized security certifications are an advantage.

Key Skills

Enterprise Security Architecture, Security Strategy, Security Roadmap Planning, Architecture Assurance, Risk Management, Threat Modeling, Vulnerability Management, Firewall, IPS, WAF, SIEM, EDR, DLP, NAC, Cloud Security, Microsoft Azure, AWS, Zero Trust, Zscaler, IAM, Active Directory, LDAP, Azure AD/Entra ID, ITDR, AI Security, AI Infrastructure Security, IT Infrastructure, Container Security, OT/IoT Security, Claroty, Nozomi Networks, SCADAfence, Security Governance, Stakeholder Management, TCO, ROI, Vendor Evaluation, Budget Management, Project Management, and Program Management.