Cyber Security Architect

Good co India; India; On-site; INR 2,400,000 - 4,800,000; Full time

Job summary

Good co India is seeking an experienced cybersecurity architect to lead the design and implementation of enterprise security across applications, infrastructure, and cloud platforms. You will drive architecture standards, security controls, and SDLC integration to protect data and services.

The role requires hands-on expertise in IAM, Zero Trust, cloud security, threat modeling, and secure DevOps practices, with collaboration across engineering and compliance teams.

Qualifications

• 5–10 years in Cybersecurity, Information Security, or related field.
• Experience designing and implementing enterprise security architectures.
• Strong knowledge of security domains: network, cloud, data, application, identity.
• Hands-on with IAM, PAM, SSO, Zero Trust, encryption, PKI.
• Cloud security architecture across AWS/Azure/GCP with IAM and controls.
• Experience securing microservices, containers, CI/CD pipelines.
• Threat modeling, risk assessment, vulnerability management, incident response.
• Familiarity with security monitoring tools and SIEM/SOC.

Responsibilities

• Define and drive enterprise cybersecurity architecture and roadmap.
• Design secure architectures across apps, infra, networks, cloud, data, endpoints.
• Develop security architecture standards, reference architectures, and controls.
• Conduct architecture reviews and ensure security in SDLC.
• Design and implement IAM, PAM, Zero Trust, network and data security.
• Perform threat modeling, risk assessments, vulnerability reviews.
• Collaborate with Engineering, DevOps, Cloud, Product, and Compliance teams.
• Drive DevSecOps and secure SDLC with automated security testing.
• Define security requirements for APIs, microservices, cloud-native apps, and integrations.
• Evaluate security technologies and vendors; advise on best-fit platforms.

Skills

Security architecture

Cloud security

Threat modeling

DevSecOps

CI/CD security

SIEM & SOC

Zero Trust

API security

Kubernetes security

Identity security

Education

Bachelor's degree in CS/IT/Cybersecurity

BE/B.Tech/MCA/M.Tech or equivalent

Tools

AWS

Azure

GCP

IAM

SAML/OAuth

Job description

Role & responsibilities

• Define and drive the enterprise cybersecurity architecture, security strategy, and technical roadmap aligned with business objectives.
• Design secure, scalable, and resilient architectures across applications, infrastructure, networks, cloud platforms, data, and endpoints.
• Develop and implement security architecture standards, principles, patterns, reference architectures, and technical controls.
• Conduct security architecture reviews and ensure security requirements are incorporated throughout the SDLC and technology lifecycle.
• Design and implement security solutions covering IAM, PAM, Zero Trust, network security, application security, cloud security, data protection, and endpoint security.
• Perform threat modeling, security risk assessments, vulnerability assessments, and security design reviews for new and existing systems.
• Partner with Engineering, Architecture, DevOps, Cloud, Product, Infrastructure, and Compliance teams to integrate security into technology solutions.
• Drive DevSecOps and Secure SDLC practices, including automated security testing and security controls within CI/CD pipelines.
• Define security requirements for APIs, microservices, cloud-native applications, databases, and third-party integrations.
• Evaluate and recommend cybersecurity technologies, platforms, tools, and vendors based on security requirements and business needs.
• Establish security controls for AWS, Azure, GCP, Kubernetes, containers, and hybrid/multi-cloud environments.
• Ensure alignment with security and compliance frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, PCI DSS, and applicable regulatory requirements.
• Collaborate with Security Operations teams on SIEM, SOC, incident response, threat detection, vulnerability management, and security monitoring.
• Identify security gaps and technical risks and develop remediation strategies and long-term security improvements.
• Provide technical leadership and guidance to Security Engineers, Architects, Developers, DevOps teams, and other technical stakeholders.
• Prepare security architecture documentation, diagrams, risk assessments, technical standards, and executive-level recommendations.
• Stay current with emerging cybersecurity threats, cloud security technologies, attack techniques, regulations, and security best practices.

Preferred candidate profile

• 5 to 10 years of experience in Cybersecurity, Information Security, Security Engineering, Security Architecture, or a related field.
• Proven experience designing and implementing enterprise security architectures and security solutions across complex technology environments.
• Strong understanding of Security Architecture, Network Security, Application Security, Cloud Security, Identity Security, Data Security, and Infrastructure Security.
• Hands-on experience with IAM, PAM, SSO, OAuth, SAML, Active Directory, Zero Trust, PKI, encryption, and authentication/authorization technologies.
• Strong knowledge of AWS, Azure, or GCP security architecture, including cloud IAM, network security, logging, monitoring, and security controls.
• Experience securing microservices, APIs, containers, Kubernetes, CI/CD pipelines, and cloud-native applications.
• Strong understanding of threat modeling, risk assessment, vulnerability management, penetration testing, incident response, and security controls.
• Working knowledge of SIEM, SOC, SOAR, IDS/IPS, WAF, firewalls, DLP, EDR, and security monitoring technologies.
• Strong understanding of DevSecOps, Secure SDLC, application security, API security, and security automation.
• Experience with cybersecurity frameworks and standards such as NIST, ISO 27001, CIS Controls, SOC 2, PCI DSS, and GDPR.
• Ability to conduct architecture reviews, security assessments, threat modeling, and risk analysis and translate findings into actionable technical solutions.
• Strong experience collaborating with Engineering, Cloud, DevOps, Infrastructure, Product, Compliance, Risk, and senior leadership teams.
• Excellent technical leadership, communication, stakeholder management, analytical, and problem-solving skills.
• Ability to influence security decisions across teams and balance security, business requirements, performance, scalability, and cost.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, Electronics, or a related technical discipline.
• B.E./B.Tech/MCA/M.Tech or equivalent qualification preferred.
• Certifications such as CISSP, CCSP, CISM, OSCP, CEH, Security+, AWS Security Specialty, Azure Security Engineer, or Google Cloud Security are an added advantage.