Cloud Security Architect

Minfy Technologies; Hyderabad; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Minfy Technologies is seeking a Cloud Security Architect & Lead to own security architecture, governance, and compliance across AWS, Azure, and GCP. You will drive cloud security transformation, enable DevSecOps, and ensure resilient operations for Minfy-managed and customer environments.

Lead a cross-functional team, define security standards, establish guardrails, and implement Zero Trust across platforms. Strong experience in cloud security, IAM, and regulatory frameworks is essential.

Qualifications

• 12–15+ years of experience in Infrastructure, Cloud, Security, or SRE domains.
• Minimum 7+ years of cloud security experience.
• Minimum 3+ years leading cloud security teams or programs.
• Hands-on across AWS, Azure, and GCP.
• Strong understanding of cloud-native architectures, DevSecOps, Identity Security, Compliance frameworks, and Security Operations.
• Experience supporting enterprise-scale SaaS environments.
• Strong customer-facing and consulting capabilities.

Responsibilities

• Define and maintain enterprise cloud security architecture standards across AWS, Azure, and GCP.
• Develop secure landing zones, reference architectures and guardrails.
• Drive Zero Trust Architecture adoption across cloud platforms.
• Embed security controls into CI/CD and IaC pipelines.
• Automate compliance validation and security posture assessments.
• Lead security incident response and threat management across multi-cloud.
• Provide executive reporting on security posture and risk.
• Partner with Delivery Leaders and customers for security reviews.

Skills

Cloud security

AWS

Azure

GCP

DevSecOps

Compliance frameworks

Security Operations

Identity Security

SaaS environments

Customer-facing consulting

Job description

Job Description: Cloud Security Architect & Lead

Role Summary

The Cloud Security Architect & Lead will own the security architecture, governance, compliance, and operational security posture across Minfy's multi-cloud environments spanning AWS, Microsoft Azure, and Google Cloud Platform (GCP). This leadership role is responsible for establishing security standards, driving cloud security transformation initiatives, enabling DevSecOps practices, and ensuring secure, compliant, and resilient cloud operations for both Minfy-managed and customer-managed environments.

The individual will work closely with SRE, Cloud Engineering, FinOps, Product Engineering, AI/ML teams, Customer Success, and Strategic Account teams to embed security into every aspect of cloud service delivery.

Key Responsibilities

Multi-Cloud Security Architecture

• Define and maintain enterprise cloud security architecture standards across AWS, Azure, and GCP.
• Develop secure landing zones, reference architectures, and cloud security guardrails.
• Hybrid cloud environments
• SaaS platforms
• Review and approve security designs for new cloud initiatives and customer engagements.
• Drive Zero Trust Architecture adoption across all cloud platforms.

Cloud Security Engineering & DevSecOps

• Embed security controls into CI/CD and Infrastructure-as-Code pipelines.
• Implement Security-as-Code and Policy-as-Code frameworks.
• Automate compliance validation and security posture assessments.
• Establish secure software supply chain controls.
• Drive secure container, Kubernetes, and serverless security practices.
• Integrate automated vulnerability and misconfiguration detection into engineering workflows.

Security Operations & Threat Management

• Define and oversee cloud security monitoring, detection, and response capabilities.
• Establish multi-cloud threat detection strategies.
• Lead security incident response and forensic investigations.
• Drive vulnerability management programs across cloud platforms.
• Implement cloud-native threat intelligence and proactive threat hunting capabilities.
• Develop operational runbooks and security response automation.Develop cloud security governance frameworks and policies.
• Establish cloud risk management and control assessment processes.
• Lead compliance initiatives including:
• ISO 2701
• SOC 2
• PCI DSS
• GDPR
• HIPAA
• NIST CSF
• Support customer security reviews and regulatory audits.
• Build continuous compliance monitoring capabilities.

Identity, Access & Data Security

• Define enterprise IAM strategy across AWS, Azure, and GCP.
• Implement Zero Trust and least-privilege access models.
• MFA
• SSO
• Federated Identity
• Privileged Access Management
• Lead secrets management and encryption strategy.
• Define enterprise data classification and protection controls.

AI & Emerging Security

• Secure GenAI and AI/ML platforms deployed in cloud environments.
• Establish governance controls for AI workloads.
• Define security standards for LLM deployments and AI-assisted operations.
• Assess risks associated with AI services and third-party integrations.
• Collaborate with AI engineering teams to implement secure AI architectures.

Leadership & Organizational Responsibilities

• Build and lead a Cloud Security Center of Excellence within SRE.
• Mentor Cloud Security Engineers and Security Analysts.
• Partner with Strategic Account Directors, TAMs, Cloud Architects, and Delivery Leaders.
• Provide executive-level reporting on security posture, risks, and remediation plans.
• Support customer-facing security discussions and solution reviews.

Required Qualifications

• 12–15+ years of experience in Infrastructure, Cloud, Security, or SRE domains.
• Minimum 7+ years of cloud security experience.
• Minimum 3+ years leading cloud security teams or programs.
• Hands-on expertise across AWS, Azure, and GCP.
• Strong understanding of:
• Cloud-native architectures
• DevSecOps
• Identity Security
• Compliance frameworks
• Security Operations
• Experience supporting enterprise-scale SaaS environments.
• Strong customer-facing and consulting capabilities.

Preferred Certifications

• AWS Certified Security – Specialty
• AWS Solutions Architect Professional
• Microsoft Certified: Cybersecurity Architect Expert
• Google Professional Cloud Security Engineer
• CISSP
• CCSP
• CISM
• CKS (Certified Kubernetes Security Specialist)
• Reduction in critical cloud security findings.
• Cloud Security Posture Management (CSPM) score improvement.
• Security incident reduction.
• MTTD and MTTR improvements.
• Percentage of infrastructure compliant by default.
• Vulnerability remediation SLA adherence.
• Customer security audit success rate.
• Security automation coverage across cloud platforms.

Reporting Structure

Reports To: Delivery Leader

Manages: Cloud Security Engineers, Security Analysts, DevSecOps Engineers, Security Compliance Specialists

This role becomes the security pillar leader within the SRE organization, alongside leaders for Cloud Operations, FinOps, Platform Engineering, Observability, and Automation, ensuring secure and compliant operations across AWS, Azure, and GCP customer environments.