Azure Security

Athena BharatJobs; Dadri, Chennai District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Athena BharatJobs is seeking an experienced Cloud Security Architect to design, implement, and maintain security controls across AWS, Azure, and GCP. The role combines architectural leadership with hands-on security operations to ensure a robust cloud security posture.

The candidate will drive security baseline reviews, policy management, and CNAPP alert response, coordinating with internal teams and external providers to remediate findings and strengthen controls across all cloud platforms.

Qualifications

• 5+ years of cloud security architecture experience.
• Proven hands-on experience with AWS, Azure, and GCP security services.
• Strong knowledge of CNAPP tools and cloud security controls.
• Familiarity with security frameworks and compliance standards.
• Experience with IAM, encryption technologies, and network security.

Responsibilities

• Design and implement security controls across AWS, Azure, and GCP.
• Maintain security architecture documentation and governance artifacts.
• Conduct annual baseline reviews and address non-compliance issues.
• Lead penetration testing coordination and validation of findings.
• Review and approve security policies including cloud-native controls.
• Serve as CSOC contact for cloud security alerts and incident coordination.
• Collaborate with service providers and internal teams to elevate cloud security postures.

Skills

Cloud security architecture

AWS security services

Azure security services

GCP security services

CNAPP solutions

Security frameworks

Identity and access management

Tools

Wiz

Job description

JD

Azure Security L2 L3

Cloud Security Architect - Multi-Cloud Environment (AWS, Azure, GCP)

Position Overview

We are seeking an experienced Cloud Security Architect to design, implement, and maintain comprehensive security controls across our multi-cloud infrastructure spanning AWS, Azure, and Google Cloud Platform (GCP). This role combines strategic security architecture with hands-on operational responsibilities to ensure robust security posture across all cloud environments.

Key Responsibilities

Security Architecture and Controls

• Design and propose innovative security controls to enhance overall security posture across AWS, Azure, and GCP environments
• Continuously improve existing security controls and configurations in multi-cloud deployments
• Maintain comprehensive security architecture documentation and ensuring accuracy and accessibility

Security Assessment and Baseline Management

• Conduct annual security baseline reviews across all cloud platforms (AWS, Azure, GCP)
• Identify, implement, and manage security controls including new implementations, modifications to existing settings, and removal of obsolete controls to address emerging threats
• Analyze monthly security baseline reports and collaborate with reporting teams to eliminate false positives
• Update non-compliance status within security baseline governance frameworks, including risk identification and target remediation dates
• Proactively perform security assessments to identify gaps in multi-cloud environments and elevate security incidents appropriately

Compliance Management

• Develop comprehensive action plans for addressing non-compliance issues across cloud platforms
• Assign and coordinate team responsibilities for remediation activities
• Partner with AWS, Azure, and GCP service providers to assess environments against industry security best practices
• Transform identified security gaps into actionable remediation items with clear timelines

Security Testing and Validation

• Own and manage the penetration testing process across all cloud environments (coordinating with external vendors)
• Ensure all prerequisites are met for vendor-conducted security testing
• Track, validate, and ensure timely closure of penetration test findings across AWS, Azure, and GCP

Access and Policy Management

• Review and approve firewall requests for multi-cloud environments
• Evaluate and approve proxy requests across cloud platforms
• Review and approve RACI matrices for services involving cloud security architecture
• Assess and approve security policy changes including AWS Service Control Policies, Azure policies, GCP IAM policies, KMS policies, and other cloud-native security configurations
• Oversee bi-annual Firewall Rule Reviews (FFR) to ensure network security compliance

Cloud Security Alert Response

• Serve as primary point of contact for CSOC team regarding cloud security alerts across all platforms
• Conduct thorough analysis of incoming security alerts from AWS, Azure, and GCP environments
• Provide contextual updates and technical insights to CSOC team on alert findings
• Investigate root causes of security incidents across multi-cloud infrastructure
• Validate alert legitimacy and implement processes to reduce false positives
• Recommend and coordinate remediation steps for identified security concerns

CNAPP Alert Response

• Review security vulnerabilities and misconfigurations detected by cloud security platforms (such as Wiz) across AWS, Azure, and GCP environments
• Validate identified security issues and eliminate false positives through technical analysis
• Document findings with comprehensive context and technical details for stakeholder communication
• Actively participate in Quantitative Risk Assessments (QRA) for cloud environments
• Communicate identified risks and develop actionable plans to address security concerns
• Coordinate with cloud governance teams to elevate and manage cloud security risks appropriately

Collaboration and Support

• Provide technical support to cloud operations and implementation teams across all platforms
• Address application team inquiries regarding security improvements and best practices
• Collaborate with second line of defense teams on developing and refining cloud security guidelines
• Identify opportunities for security process improvements to enhance protection and reduce operational ambiguity

Required Qualifications

• 5+ years of experience in cloud security architecture
• Hands-on experience with AWS, Azure, and Google Cloud Platform security services
• Strong understanding of cloud-native security tools and CNAPP solutions
• Experience with security frameworks and compliance standards
• Knowledge of network security, identity and access management, and encryption technologies
• Strong analytical and problem-solving skills
• Excellent communication and collaboration abilities

Preferred Qualifications

• Relevant cloud security certifications (AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer)
• Experience with security automation and Infrastructure as Code
• Knowledge of DevSecOps practices and CI/CD security integration