Cloud Architect

Jobtailor; Bengaluru; On-site; INR 3,200,000 - 5,200,000; Full time

Job summary

Jobtailor is seeking a Senior Cloud Security Architect to lead security architecture for cloud-native workloads on GCP from Bengaluru. You will drive Zero‑Trust maturity, create golden paths, and translate security policies into actionable guidance for application teams.

The role emphasizes hybrid connectivity, identity federation, and secure SaaS integration, with strong collaboration across threat modeling, networking, and data architecture teams.

Qualifications

• 10+ years of IT experience with 7+ years in cloud architecture/engineering.
• 7+ years in cloud architecture/engineering with 4+ years focused on cloud security.
• Deep hands-on experience with GCP security services (IAM, Workload Identity, Cloud Armor, etc.).
• Proven experience designing or maturing Zero‑Trust architectures (BeyondCorp).
• Strong understanding of OAuth/OIDC, service-to-service auth, and API security patterns.
• Experience designing security for hybrid architectures with on-prem to cloud connectivity.
• Experience with SaaS security frameworks (CASB, SSPM, DLP).
• DevSecOps with CI/CD guardrails and IaC scanning.

Responsibilities

• Define and mature security architecture patterns for cloud-native workloads on GCP.
• Guide application teams migrating to a Zero‑Trust GCP segment.
• Conduct gap analyses and recommend remediations to raise security maturity.
• Translate ISP into actionable architecture guidance and guardrails.
• Establish golden paths for securing RPC endpoints, service‑to‑service auth, and logging.
• Design secure patterns for hybrid connectivity between on‑prem data centers and GCP.
• Develop a holistic security strategy for third‑party SaaS apps focusing on identity and data governance.
• Partner with threat modeling, networking, and data teams to ensure risk-balanced designs.

Skills

Cloud security

GCP security

CI/CD security

Zero‑Trust

Apigee experience

OAuth/OIDC

Mainframe connectivity

Threat modeling

SaaS security

AI tools for productivity

Tools

IAM & Workload Identity

VPC/SCC/Cloud Armor

Secrets Manager

Cloud Logging/Monitoring

GKE/Cloud Run

Artifact/Build

Pub/Sub

Apigee

Job description

Responsibilities

• Define and mature security architecture patterns and reference architectures for cloud‑native workloads on GCP.
• Provide day‑to‑day guidance to application teams migrating from legacy environments to a new Zero‑Trust GCP segment.
• Conduct gap analyses and recommend remediations to raise security maturity.
• Translate Ford’s Information Security Policies (ISP) into actionable architecture guidance and guardrails.
• Establish “golden paths” for securing RPC endpoints, service‑to‑service auth, workload identity, runtime security, and logging.
• Design and document secure patterns for hybrid connectivity, ensuring safe data exchange and identity federation between on‑premise data centers (including mainframe environments) and GCP.
• Develop a holistic security strategy for critical third‑party SaaS applications, focusing on identity integration (SSO), data governance, and unified visibility.
• Partner with threat modeling, networking, and data architecture teams to ensure holistic, risk‑balanced designs.

Requirements

• 10+ years of IT experience with 7+ years in cloud architecture/engineering with 4+ years focused on cloud security (enterprise scale).
• Deep hands‑on experience with GCP services relevant to security: IAM & Workload Identity, VPC/SCC/Cloud Armor, Secrets Manager, Cloud Logging/Monitoring, GKE/Cloud Run, Artifact/Build, Pub/Sub, Apigee.
• Proven experience designing or maturing Zero‑Trust architectures (BeyondCorp principles; identity‑centric access).
• Strong understanding of OAuth/OIDC, service‑to‑service auth, token flows, and API security patterns.
• Experience designing security for hybrid architectures that connect modern cloud platforms with traditional enterprise data centers through GCP Interconnect, including mainframe systems.
• Experience with SaaS security frameworks and tools, such as Cloud Access Security Brokers (CASB), SaaS Security Posture Management (SSPM), and advanced data loss prevention (DLP) strategies.
• Integrate security seamlessly into the CI/CD pipeline (DevSecOps), ensuring automated guardrails and infrastructure‑as‑code (IaC) scanning are part of the “golden path.”
• Experience producing reference architectures, standards, and “golden paths” for engineering teams.
• Good knowledge of security.
• Hands‑on use of AI tools to improve productivity (e.g., coding, analysis, documentation).
• Excellent communication and stakeholder enablement skills.
• GCP security certifications (e.g., Professional Cloud Security Engineer, Professional Cloud Architect) preferred.
• Experience with Apigee at enterprise scale (API gateways, policies, auth patterns, observability) preferred.

Core Competencies

Demonstrates expertise in designing and maturing security architectures for cloud‑native workloads on GCP, with a strong focus on Zero‑Trust principles, hybrid connectivity, and SaaS security frameworks. Proficient in integrating security into CI/CD pipelines and producing actionable architecture guidance for application teams.