LA- Azure Cloud Security Architect

Position: Lead Analyst
Experience: 9 12 Years
Category: Infrastructure
Shift: Timing/rotation etc. details
Main location: Bangalore
Position ID: J1026-1439
Employment Type: Full Time

Education Qualification: Bachelors degree in computer science or related field or higher with minimum 3 years of relevant experience.

Job Description: Azure Cloud Security Architect

Job Summary:

Looking for an experienced Azure Cloud Security Architect to design and implement secure Azure and hybrid infrastructure architectures aligned with Zero Trust and Secure by Design principles. The role focuses on network segmentation, internal traffic control, identity security, privileged access, infrastructure isolation, and enterprise security risk reduction.
Key Responsibilities

. Design and implement secure Azure and hybrid cloud architectures using VNets, subnets, NSGs, Azure Firewall, routing, Private Endpoints, and hybrid connectivity.
. Implement network segmentation, east west traffic inspection, microsegmentation, workstation to workstation restrictions, and controls to prevent unauthorized lateral movement.
. Define and enforce security zones across user, server, management, backup and recovery, virtualization, and privileged administration environments.
. Strengthen identity security through Microsoft Entra ID, Active Directory Tier 0 isolation, RBAC, PIM, Conditional Access, MFA, and administrative segregation.
. Design secure privileged administration using PAM, jump hosts, Privileged Administrative Workstations (PAWs), and controlled management plane access.
. Implement isolation and security controls for backup and recovery environments, hypervisors, and vCenter infrastructure.
. Establish cloud security governance using Azure Policy and Microsoft Defender for Cloud, with appropriate security monitoring and logging.
. Develop a security architecture roadmap covering network segmentation, identity security, PAM, infrastructure isolation, and cloud security improvements.
. Conduct security architecture assessments, identify risks, document mitigation measures and residual risks, and track remediation initiatives.

Required Skills

. 1012 years of relevant experience in Azure cloud architecture, infrastructure security, or hybrid cloud security.
. Strong hands on expertise in Azure networking, Azure Firewall, NSGs, routing, Private Endpoints, and hybrid connectivity.
. Practical experience in network segmentation, east west traffic control, and lateral movement prevention.
. Strong knowledge of Microsoft Entra ID, Active Directory security, Tier 0 isolation, RBAC, PIM, and privileged access controls.
. Experience with PAM, jump host architecture, PAWs, backup network segregation, and virtualization security.
. Expertise in Zero Trust architecture, cloud security governance, security risk assessment, and architecture documentation.