Cloud Security Architect

Alike Thoughts; India; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Alike Thoughts is seeking a Cloud Security Architect to lead the design, implementation and continuous improvement of secure cloud and Microsoft security solutions across enterprise environments. The role blends architecture, hands‑on engineering and client‑facing delivery.

The architect will translate business and regulatory requirements into scalable controls, SOPs and remediation plans, while providing leadership and guidance to security engineers and delivery teams.

Responsibilities

• Own cloud security architecture and engineering across Azure and Microsoft 365, with coverage of AWS, GCP, hybrid cloud and container platforms.
• Design and implement secure cloud foundations, including landing zones, identity controls, network security, encryption, logging, monitoring and governance guardrails.
• Architect and enhance Microsoft security capabilities such as Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Azure Key Vault and Intune.
• Lead CNAPP implementation and operations, covering CSPM, CWPP, CDR, KSPM, vulnerability management, asset discovery, compliance posture and threat detection.
• Onboard cloud subscriptions, accounts and Kubernetes environments into security platforms; troubleshoot agent, connector and telemetry issues.
• Define, tune and automate posture, vulnerability and threat‑detection policies across workload, container and Kubernetes security services.
• Integrate security platforms with SIEM, SOAR, ITSM and ticketing solutions to improve detection, response and remediation workflows.
• Lead cloud security assessments, identify control gaps, define risk‑based remediation plans and track actions through closure.
• Drive investigation and coordination of high‑severity cloud security incidents, including stakeholder communications, escalation, root‑cause analysis and lessons learned.
• Produce technical designs, architecture diagrams, implementation plans, SOPs, runbooks, incident reports and weekly/monthly service reports.
• Provide technical leadership, mentoring and quality oversight to cloud security engineers and support teams.
• Support client workshops, solution presentations, estimates, proposals, RFP responses, audits and due‑diligence activities.

Job description

Role Purpose

The Cloud Security Architect will lead the design, implementation and continuous improvement of secure cloud and Microsoft security solutions across enterprise environments. The role combines architecture, hands‑on engineering, incident leadership, governance and client-facing delivery. The architect will translate business and regulatory requirements into scalable security controls, standards, operating procedures and measurable remediation plans.

Key Responsibilities

• Own cloud security architecture and engineering across Azure and Microsoft 365, with working coverage of AWS, GCP, hybrid cloud and container platforms.
• Design and implement secure cloud foundations, including landing zones, identity controls, network security, encryption, logging, monitoring and governance guardrails.
• Architect and enhance Microsoft security capabilities such as Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Azure Key Vault and Intune.
• Lead CNAPP implementation and operations, covering CSPM, CWPP, CDR, KSPM, vulnerability management, asset discovery, compliance posture and threat detection.
• Onboard cloud subscriptions, accounts and Kubernetes environments into security platforms; troubleshoot agent, connector and telemetry issues.
• Define, tune and automate posture, vulnerability and threat‑detection policies across workload, container and Kubernetes security services.
• Integrate security platforms with SIEM, SOAR, ITSM and ticketing solutions to improve detection, response and remediation workflows.
• Lead cloud security assessments, identify control gaps, define risk‑based remediation plans and track actions through closure.
• Drive investigation and coordination of high‑severity cloud security incidents, including stakeholder communications, escalation, root‑cause analysis and lessons learned.
• Produce technical designs, architecture diagrams, implementation plans, SOPs, runbooks, incident reports and weekly/monthly service reports.
• Provide technical leadership, mentoring and quality oversight to cloud security engineers and support teams.
• Support client workshops, solution presentations, estimates, proposals, RFP responses, audits and due‑diligence activities.

Preferred candidate profile