Cloud & AI Security Architect

Fusion Practices LTD; Delhi; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

Fusion Practices LTD is seeking a Senior AI & Azure Security Architect to design and deliver secure cloud and AI solutions in regulated environments. You will work across Azure security, AI governance, identity, endpoint security, data protection and security monitoring, engaging with senior stakeholders.

This role requires 10+ years in IT/security with 5+ years in Azure security architecture and experience in regulated industries. Strong leadership and client-facing skills are essential.

Qualifications

• 10+ years in IT/Security.
• 5+ years in Azure security architecture.
• Experience in a regulated industry (UK financial services or insurance).
• Strong understanding of AI security, cloud security, identity, endpoint and data protection.
• SC-500 or AZ-500, or willingness to obtain SC-500 within 6 months.
• Strong communication, leadership and client-facing skills.

Responsibilities

• Design and implement secure Azure architectures, including Landing Zones, hub-and-spoke networking, NSGs, Azure Firewall, Private Endpoints, Bastion and Azure Policy.
• Secure AI tools and agents (e.g., Copilot, Claude) with focus on prompt injection, MCP and connector security.
• Develop AI security and governance aligned with OWASP, NIST AI RMF and ISO 42001, including GDPR and DPIA.
• Design identity solutions using Entra ID, CA, PIM, managed identities and RBAC across multiple tenants.
• Secure Azure Virtual Desktop/Windows 365, Intune and Defender for Endpoint with controls.
• Implement Purview, DLP, Defender for Storage and secure file-transfer controls.
• Develop monitoring and security solutions using Microsoft Sentinel, Log Analytics and Defender for Cloud.
• Automate security infrastructure using Bicep or Terraform.
• Lead and mentor engineers and communicate architecture and security recommendations to senior client stakeholders.

Skills

Azure security architecture

AI security

Governance

Identity security

Endpoint security

Data protection

Security monitoring

Tools

Entra ID

Conditional Access

PIM

RBAC

Defender for Endpoint

Microsoft Purview

DLP

Defender for Storage

Microsoft Sentinel

Log Analytics

Defender for Cloud

Bicep

Terraform

Job description

Job Overview

We are seeking a Senior AI & Azure Security Architect to design and deliver secure cloud and AI solutions in a regulated environment. The role requires strong expertise across Azure security, AI security and governance, identity, endpoint security, data protection and security monitoring, along with the ability to engage confidently with senior stakeholders.

Key Responsibilities

• Design and implement secure Azure architectures, including Landing Zones, hub-and-spoke networking, NSGs, Azure Firewall, Private Endpoints, Bastion and Azure Policy.
  

• Secure AI tools and agents including Microsoft Copilot, Claude and GitHub Copilot, with focus on prompt injection, MCP and connector security.
  

• Develop AI security and governance aligned with OWASP, NIST AI RMF and ISO 42001, including UK GDPR and DPIA requirements.
  

• Design identity solutions using Entra ID, Conditional Access, PIM, managed identities and RBAC across multiple tenants.
  

• Secure Azure Virtual Desktop/Windows 365, Intune and Defender for Endpoint, including clipboard, drive and USB controls.
  

• Implement Microsoft Purview, DLP, Defender for Storage and secure file-transfer controls.
  

• Develop monitoring and security solutions using Microsoft Sentinel, Log Analytics and Defender for Cloud.
  

• Automate security infrastructure using Bicep or Terraform.
  

• Lead and mentor engineers and communicate architecture and security recommendations to senior client stakeholders.
  

Requirements

Required Experience

• 10+ years in IT/Security, including 5+ years in Azure security architecture.
  

• Experience in a regulated industry, ideally UK financial services or insurance.
  

• Strong understanding of AI security, cloud security, identity, endpoint and data protection.
  

• SC-500 or AZ-500, or willingness to obtain SC-500 within 6 months.
  

• Strong communication, leadership and client-facing skills.
  

Desirable

• SC-100, AZ-140 or SC-300.
  

• CISSP or IAPP AIGP.
  

• Consulting/client-facing experience.