Cloud Platform Engineering - Azure Security, AVP

STATE STREET CORPORATION; Hyderabad; On-site; INR 3,000,000 - 5,200,000; Full time

Job summary

Charles River Development seeks an experienced AVP, Cloud Platform Engineering to lead cloud security, governance, and platform engineering across Azure environments. You will define enterprise IAM strategies, drive governance automation, and mentor high-performing engineering teams to deliver secure, scalable cloud services.

Role requires deep expertise in Microsoft Entra ID, Azure security, Policy-as-Code, and automation with Terraform, PowerShell, Python, and CI/CD tooling.

Qualifications

• Bachelor's degree in Computer Science, Engineering, IT, or related field.
• 15–20 years of extensive experience in cloud security and identity management.
• 5+ years of direct people management experience leading Cloud engineering teams.
• Deep expertise in Microsoft Entra ID, including Conditional Access, Identity Protection, PIM, Access Reviews, Identity Governance, Federation and SSO.
• Strong experience with Azure IAM, RBAC, Privileged Access models, and Zero Trust architectures.

Responsibilities

• Azure Cloud Security: define and execute IAM strategies and governance across environments.
• Azure Governance & Platform Engineering: implement Policy-as-Code and governance guardrails.
• Automation & AI Enablement: drive automation and AI-enabled engineering solutions.
• Stakeholder & Client Engagement: partner with leadership and external partners to align roadmaps.
• Leadership & People Management: lead teams, performance reviews, and talent development.

Skills

Azure IAM

Entra ID

Identity Governance

Zero Trust

RBAC & Least Privilege

Cloud Security

Platform Engineering

Leadership

Automation

AI-enabled Engineering

Stakeholder Management

Education

Bachelor's degree in CS/Engineering/IT

Tools

Terraform

PowerShell

Python

GitHub Actions

Azure DevOps

Bicep

Azure Policy

Job description

Charles River Development is seeking an experienced Assistant Vice President (AVP), Cloud Platform Engineering to lead strategic cloud security, identity and governance initiatives across enterprise-scale Azure environments. This role combines deep technical leadership with people management responsibilities, driving cloud modernization, security transformation, governance automation, and platform engineering excellence. The AVP will be responsible for defining and executing cloud security and identity strategies, managing high-performing engineering teams, influencing enterprise architecture decisions, and partnering closely with senior technology and business leaders. The role requires strong expertise in Microsoft Entra ID, Azure Security, Azure Policy, Azure IAM, Azure AD B2C/External Identity, cloud governance, IAC, automation, and AI-enabled engineering solutions. This lead will oversee the full employee lifecycle, including hiring, onboarding, mentoring, performance management, career development, succession planning, and talent retention while ensuring delivery of secure, scalable, and compliant cloud platform services.

Key Responsibilities

• Azure Cloud Security Define and execute enterprise identity and access management strategies leveraging Microsoft Entra ID. Lead design and implementation of Azure Identity Governance, Privileged Identity Management (PIM), Conditional Access, Identity Protection, Access Reviews, and Zero Trust security controls. Drive enterprise adoption of Azure IAM best practices, RBAC models, least-privilege access, federated identity solutions, and authentication services basis business decisions. Lead architecture and governance of Azure AD B2C / External Identity solutions for client-facing and partner-facing applications. Partner with security, risk, compliance, and audit teams to ensure adherence to regulatory and security requirements.
• Azure Governance & Platform Engineering Define enterprise cloud governance frameworks using Azure Policy, Management Groups, Landing Zones, and subscription governance models. Lead implementation of Policy-as-Code, Governance-as-Code, and Security-as-Code capabilities using modern engineering practices. Establish automated compliance validation, remediation, and continuous governance processes across Azure environments. Collaborate with architecture, security, application, and infrastructure teams to define cloud standards and guardrails. Drive platform engineering initiatives focused on self-service capabilities, standardization, scalability, and operational excellence.
• Automation & AI Enablement Champion automation-first engineering practices using Terraform, PowerShell, Python, GitHub Actions, Azure DevOps, and other cloud-native tooling. Identify and implement AI-driven solutions to improve engineering productivity, governance automation, operational efficiency, compliance monitoring, and developer experience. Lead adoption of intelligent operational workflows leveraging Generative AI, Copilot technologies, and engineering automation frameworks.
• Stakeholder & Client Engagement Collaborate with internal technology teams, enterprise architecture, cybersecurity, operations, product management, and executive leadership. Partner with external clients, vendors, and strategic partners to understand requirements and deliver secure cloud solutions. Influence and negotiate across multiple stakeholder groups to drive alignment on priorities, standards, and platform roadmaps. Act as a trusted advisor to senior leaders on cloud strategy, identity modernization, security posture, and governance transformation.
• Leadership & People Management Lead, mentor, and develop a team of cloud platform, security, and identity engineers. Manage the end-to-end employee lifecycle including workforce planning, hiring, onboarding, performance management, compensation discussions, talent development, succession planning, promotions, and retention strategies. Conduct year-end performance reviews, goal setting, career development planning, and ongoing performance coaching. Foster a culture of accountability, collaboration, innovation, and continuous improvement. Effectively manage employee relations, conflict resolution, difficult conversations, and stakeholder escalations. Provide executive-level reporting and updates to senior technology leadership, engineering leadership, and business stakeholders. Build and maintain a high-performing engineering organization aligned with business priorities and strategic objectives.

Required Qualifications

Bachelor's degree in Computer Science, Engineering, Information Technology, or related discipline. 15-20 years of extensive experience in cloud security, identity management 5+ years of direct people management experience leading Cloud engineering teams Demonstrated experience managing year-end reviews, performance management processes, career development, employee mentoring, and conflict resolution. Deep expertise in Microsoft Entra ID, including: Conditional Access Identity Protection Privileged Identity Management (PIM) Access Reviews Identity Governance Federation and SSO Strong experience with Azure IAM, RBAC, Privileged Access models, and Zero Trust architectures. Extensive experience with Azure Security services including: Microsoft Defender for Cloud Microsoft Sentinel Key Vault Security Center Azure Monitor Security Governance Frameworks Strong expertise implementing Azure Policy, Policy-as-Code, Governance-as-Code, and enterprise cloud controls. Experience reporting platform health, risk, compliance, security, and delivery metrics to executive leadership. Proven ability to manage complex stakeholder relationships across global organizations. Strong communication, presentation, influencing, and leadership skills.

Preferred Qualifications

Experience leading cloud transformation programs within large-scale financial services or regulated enterprise environments. Strong understanding of Azure Landing Zones, enterprise networking, hybrid connectivity, and multi-cloud operating models. Strong experience developing infrastructure automation using Terraform, Bicep, PowerShell, Python, and CI/CD platforms. Hands-on expertise with Azure AD B2C / External Identities and customer identity management solutions. Experience building platform engineering organizations and self-service cloud capabilities. Exposure to AI-assisted engineering, Generative AI platforms, Microsoft Copilot, agentic AI frameworks, and automation-based operational models. Knowledge of regulatory frameworks such as NIST, ISO 27001, CIS, SOC2, PCI-DSS, and financial industry compliance standards. Microsoft certifications such as: Azure Solutions Architect Expert Azure Security Engineer Expert Microsoft Cybersecurity Architect Expert Azure Administrator Expert Identity and Access Administrator Associate

What We Value

• Strong people-first leadership approach.
• Strategic thinking combined with hands-on technical credibility.
• Executive presence and ability to communicate effectively with senior leadership.
• Passion for mentoring and developing engineering talent.
• Strong conflict resolution and stakeholder management skills.
• Automation-first and AI-first engineering mindset.
• Ability to balance business priorities, risk management, security, and engineering velocity.

About State Street

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

As an Equal Opportunity Employer

As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers

Read our CEO Statement

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.

Read our CEO Statement

Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.