Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Checkpoint Next Generation Firewall

Good to have skills : NA
Minimum 5 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:
As a Lead Cloud Security Engineer, you will own the network and firewall security workstream for the migration. You will set the technical direction, coordinate the engineering team, and ensure that connectivity and firewall rules are correctly configured and enabled so the migration runs securely and smoothly across every wave - with zero security gaps.



Roles Responsibilities:

Lead the network and firewall security workstream for the Color GCP and Azure GCP migration program.

Define the firewall and network security strategy, standards, and migration approach across Colo, Azure and GCP environments.

Design, review, and approve firewall rules and security policies that enable smooth, uninterrupted workload migration.

Ensure all required firewall rules are enabled and validated ahead of each migration wave and drive rapid remediation of connectivity blockers.

Oversee cloud networking components - VPCs, subnets, routing, peering, VPN/Interconnect and load balancers - across the migration landscape.

Guide and mentor engineers, review their work and coordinate delivery across the offshore team.

Partner with migration, application and infrastructure stakeholders to map dependencies and define connectivity requirements.

Establish documentation standards for firewall changes, network designs and migration runbooks drive change-management and approvals.

Lead real-time monitoring and incident response during cutover windows to detect and resolve issues quickly.

Embed security best practices, least-privilege access and compliance requirements throughout the migration.

Must have understanding on GCP networking and security - VPC, firewall rules, Cloud Interconnect/VPN, Router, GCP Cloud Native NGFW, VPC SC.

Infrastructure-as-Code (Terraform) for network/firewall provisioning.

Professional Technical Skills:

Must To Have Skills:

Proficiency in Checkpoint Next Generation Firewall.

Microsoft Azure networking and security - VNets, NSGs, Azure Firewall, ExpressRoute/VPN.

Strong understanding of TCP/IP, routing, DNS, NAT, VPN, and network segmentation.

Proven experience leading or playing a senior role in cloud migration projects.

Ability to coordinate a team, review technical work and drive delivery in an offshore model.

Experience with Colo / on premises to cloud migration at scale.

Hands-on experience with Network Security and other firewall platforms (Palo Alto, Fortinet).

Scripting skills (Python, PowerShell, or Bash) for automation.

The candidate should have minimum 5-8 years of hands-on experience in cloud networking and firewall engineering, including a lead or senior role.

This position is based at our Bengaluru office.

A 15 years full time education is required.

B.E or MCA or M.Sc. with Good Computer Science Background with good academic record of 65 and above

Strong leadership, ownership, and decision-making under time-sensitive migration windows.

Excellent communication and stakeholder-management skills across cross-functional teams.

Ability to mentor engineers and coordinate delivery across time zones in an offshore model.

Relevant certifications: GCP Professional Cloud Network Engineer / Security Engineer, Azure Network Engineer Associate (AZ-700), or equivalent.

Qualification 15 years full time education