Azure Security Architect

Atos SE; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Atos, a global leader in digital transformation, is seeking an experienced Azure Security Architect to design secure, resilient Microsoft Azure environments. You will focus on Microsoft security, identity, cloud security, SIEM/SOAR, and AI security, guiding enterprise customers through architecture definition and implementation.

The role demands hands-on experience in applying AI and GenAI to automate security processes, developing HLD/LLD, and providing technical leadership through transition

Qualifications

• Proven experience in Azure security architecture and cloud security design.
• Experience with SIEM/SOAR, Defender XDR, and identity security controls.
• Strong knowledge of Zero Trust, MFA, PIM, and RBAC.
• Hands-on implementation and operation transition leadership.

Responsibilities

• Design end-to-end security architecture for Azure and hybrid clouds.
• Develop high-level/low-level design documents and security controls.
• Lead security assessments and identify gaps and improvements.
• Define defense-in-depth and security-by-design standards.
• Provide technical leadership during migration and transformation programs.
• Implement AI-driven security with Foundry and Azure AI services.

Skills

Azure Security Architecture

Security Architecture

SIEM/SOAR

Zero Trust

Identity & Access

RBAC

MFA

Tools

Microsoft Defender for Cloud

Microsoft Sentinel

Purview

Azure OpenAI

Foundry

Logic Apps / Power Automate

Azure AD / PIM

Job description

Search by "Job Title" or "Keyword" or "Job ID"

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 54,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Role Overview

We are looking for an experienced Azure Security Architect to design and architect secure, resilient and scalable Microsoft Azure environments. The role will focus on Microsoft Security, Azure security architecture, identity, cloud security, SIEM/SOAR, endpoint security, data security and AI security.

The candidate will work with enterprise customers to assess security requirements, define security architecture, develop HLD/LLD, recommend Microsoft security solutions and provide technical leadership through implementation and operational transition.

The role also requires extensive hands-on experience in applying AI and GenAI technologies to automate and optimize enterprise processes. This includes designing secure Azure AI workloads using Microsoft Foundry and Azure OpenAI, building RAG solutions and AI agents, integrating intelligent automation with enterprise systems, and establishing appropriate data protection, responsible AI and operational controls.

Key Responsibilities

Azure Security Architecture

• Design end-to-end security architecture for Microsoft Azure and hybrid cloud environments.
• Develop security HLD/LLD, architecture diagrams, security controls and technical design documentation.
• Conduct security assessments and identify architectural gaps, risks and improvement opportunities.
• Define defense-in-depth, Zero Trust and security-by-design architecture.
• Design security controls across identity, endpoint, network, application, data and cloud layers.
• Define security architecture standards, patterns and reference architectures.
• Provide technical leadership during implementation, migration and transformation programmes.

Microsoft Security Architecture

Strong experience architecting and integrating the Microsoft security ecosystem, including:

• Microsoft Defender Vulnerability Management

Microsoft Sentinel

• Data connectors and log ingestion architecture
• Analytics rules and detection engineering
• Automation rules and Logic Apps
• Playbooks and SOAR orchestration
• Incident management and investigation workflows
• UEBA and threat detection
• Sentinel workspaces, data architecture and cost optimization
• Integration with Defender XDR and third-party security platforms
• Sentinel migration and modernization
• Conditional Access
• MFA
• Privileged Identity Management (PIM)
• Identity Governance
• RBAC and least-privilege access
• Application identities and service principals
• Managed identities
• Identity Protection
• Zero Trust identity architecture

Microsoft Purview

• Microsoft Purview Information Protection
• Data Classification and Sensitivity Labels
• Information Governance
• Data lifecycle and retention
• Data security and compliance architecture
• Integration of Purview with Microsoft 365 and security platforms

Cloud Security / CNAPP

• Architect Microsoft Defender for Cloud across Azure and hybrid/multi-cloud environments.
• Design CSPM, CWPP and CNAPP security capabilities.
• Define cloud security posture management and security governance.
• Design workload protection for Azure VMs, containers, AKS and cloud services.
• Implement cloud security recommendations and risk remediation strategies.
• Design secure Azure landing zones and cloud security guardrails.
• Integrate cloud security findings with SIEM/SOC operations.

Network Security

• Web Application Firewall
• Application Gateway
• Network Security Groups
• Private Endpoints / Private Link
• VPN Gateway
• ExpressRoute
• Design network segmentation and Zero Trust architectures.
• Define secure connectivity between on-premises, Azure and other cloud platforms.
• Design secure architectures for internet-facing and internal workloads.
• Define endpoint security baselines and security controls.
• Design EDR/XDR capabilities and integration with SOC operations.
• Architect attack surface reduction, vulnerability management and endpoint protection.
• Integrate endpoint telemetry with Microsoft Sentinel and Defender XDR.
• Define security architecture for Windows, Linux, servers, VDI/AVD and other supported platforms.

AI-Driven Process Automation

• Identify, assess and prioritize business processes suitable for AI-led automation based on value, feasibility, risk and expected return on investment.
• Design end-to-end intelligent automation solutions using Microsoft Foundry, Azure OpenAI, Foundry Agent Service, Azure AI services and Azure Machine Learning.
• Build and orchestrate AI agents and agent-driven workflows that can reason, retrieve enterprise knowledge, invoke approved tools and complete governed business actions.
• Integrate AI capabilities with Azure Logic Apps, Azure Functions, API Management, Event Grid, Service Bus and enterprise APIs to automate cross-system workflows.
• Use Microsoft Copilot Studio, Power Automate, Power Apps and AI Builder where low-code automation is appropriate, while defining enterprise architecture, security and governance guardrails.
• Design document and content automation