Cybersecurity Architect

Systems Plus Pvt. Ltd.; Pune District; Sur place; INR 4 500 000 - 6 500 000; Plein temps

Résumé du poste

Systems Plus Pvt. Ltd. seeks an experienced Cybersecurity Architect to design, implement, and strengthen security architecture across applications, cloud environments, AI-driven solutions, and network access infrastructure.

You will collaborate with development, cloud, DevOps, and infrastructure teams to embed security across the SDLC, ensuring secure, scalable, and resilient tech environments. The role emphasizes Zero Trust, AI security, and cloud security best practices.

Qualifications

• 10–15 years of overall experience in Information Security / Cybersecurity.
• Significant experience in designing and implementing enterprise security architecture.
• Demonstrated experience working with application development, DevOps, cloud, and infrastructure teams.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Strong communication, stakeholder management, analytical, and problem-solving skills.

Responsabilités

• Design and implement enterprise security architecture across applications, cloud, and networks.
• Collaborate with development teams to embed security through SDLC.
• Conduct threat modeling and architecture risk assessments.
• Lead DevSecOps and automation in CI/CD pipelines.
• Enforce secure coding practices and standards.
• Define Zero Trust, IAM, RBAC, MFA principles.

Connaissances

Cybersecurity architecture

Application security

Threat modeling

Architecture risk assessments

DevSecOps

Security automation

CI/CD security

Cloud security

Zero Trust Architecture

Formation

Bachelor’s degree in CS/IT/Cybersecurity

Outils

Checkmarx

Veracode

Snyk

SonarQube

Wiz

Prisma Cloud

Zscaler

Description du poste

Cybersecurity Architect

Location: Pune Employment Type: full-time

Job Details

We are looking for an experienced Cybersecurity Architect to design, implement, and strengthen enterprise security architecture across applications, cloud environments, AI-driven solutions, and network access infrastructure.

The individual will work closely with application development, cloud engineering, DevOps, and infrastructure teams to embed security practices throughout the software development lifecycle while ensuring secure, scalable, and resilient technology environments.

The role requires a combination of strategic security architecture expertise and hands-on technical capabilities, particularly in Application Security, DevSecOps, Cloud Security, AI Security, Zero Trust Architecture, and Zero Trust Network Access (ZTNA).

Key Responsibilities

• A. Application Security & Architecture

  Perform application security assessments, architecture reviews, and threat modeling for enterprise applications and services.

  Identify security vulnerabilities, architectural weaknesses, and potential attack vectors.

  Define secure application architecture principles and recommend appropriate security controls.

  Provide remediation guidance to development teams for identified vulnerabilities.

  Establish and promote secure coding practices and application security standards.

  Evaluate application security risks across APIs, microservices, web applications, and cloud-native workloads.

• B. DevSecOps & Pipeline Security Automation

  Integrate automated security controls and testing into CI/CD pipelines without significantly impacting release velocity.

  Implement and manage Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and container security scanning.

  Integrate security checks into build, deployment, and release processes.

  Define security gates, vulnerability thresholds, and remediation workflows.

  Collaborate with DevOps and engineering teams to establish security-as-code practices.

  Support automation of vulnerability detection, reporting, and compliance validation.

• C. Zero Trust Security Architecture

  Design and implement Zero Trust security architecture across applications, services, users, and infrastructure.

  Define identity-centric security controls, least-privilege access, and continuous authentication and authorization mechanisms.

  Implement secure access strategies for applications, APIs, workloads, and enterprise services.

  Define micro-segmentation and secure communication patterns between services.

  Establish policies for identity governance, privileged access, and access monitoring.

• D. Cloud Security

  Design and assess security architecture across cloud environments, particularly AWS, Azure, and/or GCP.

  Define cloud security controls covering IAM, network security, encryption, key management, logging, monitoring, and workload protection.

  Implement cloud security best practices and Cloud Security Posture Management (CSPM).

  Assess cloud infrastructure configurations against security standards and industry frameworks.

  Support secure architecture for cloud-native applications, containers, Kubernetes, and serverless workloads.

• E. AI Security

  Assess security risks associated with AI/ML applications, Generative AI solutions, and enterprise AI platforms.

  Define security controls for AI workloads, models, APIs, and data pipelines.

  Address risks related to prompt injection, sensitive data exposure, insecure model integrations, and unauthorized access.

  Establish security guardrails for LLM applications, AI agents, and retrieval-augmented generation (RAG) solutions.

  Define secure AI governance, data protection, model access controls, and AI risk assessment practices.

• F. Zero Trust Network Access (ZTNA)

  Design and evaluate ZTNA solutions to provide secure, identity-based access to enterprise applications and resources.

  Define access policies based on user identity, device posture, contextual risk, and application sensitivity.

  Integrate ZTNA solutions with enterprise identity providers, MFA, and endpoint security platforms.

  Evaluate traditional VPN replacement strategies and application-level access controls.

  Collaborate with network and infrastructure teams to implement secure remote access architecture.

• G. Healthcare Data Security & HIPAA Compliance

  Design and implement security controls to protect sensitive healthcare information and Electronic Protected Health Information (ePHI) across applications, cloud environments, and data integrations.

  Ensure appropriate technical safeguards are implemented to protect the confidentiality, integrity, and availability of healthcare information.

  Collaborate with application, cloud, and infrastructure teams to identify and mitigate security risks associated with the storage, processing, and transmission of ePHI.

  Define and implement controls for secure data access, encryption, audit logging, data integrity, and secure information exchange.

  Support security risk assessments and remediation activities related to HIPAA compliance requirements.

Mandatory Technical Skills

• Strong experience in Cybersecurity Architecture and enterprise security design.
• Hands-on expertise in Application Security, threat modeling, and architecture risk assessments.
• Practical experience with DevSecOps and security automation in CI/CD pipelines.
• Knowledge of SAST, DAST, SCA, container security, and vulnerability management tools.
• Strong understanding of Zero Trust Architecture, IAM, RBAC, ABAC, MFA, and least-privilege principles.
• Experience in Cloud Security across AWS, Azure, or GCP.
• Understanding of AI/ML and Generative AI security risks and mitigation strategies.
• Experience with ZTNA architecture and implementation.
• Knowledge of security frameworks such as NIST CSF, NIST SP 800-207, ISO 27001, OWASP Top 10, and OWASP API Security Top 10.

Good-to-Have Skills

• Certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, or equivalent.
• Experience with tools such as Checkmarx, Veracode, Snyk, SonarQube, Wiz, Prisma Cloud, or equivalent.
• Experience with ZTNA solutions such as Zscaler, Palo Alto Prisma Access, Cloudflare Zero Trust, or Netskope.
• Knowledge of Kubernetes security, service mesh security, and API gateways.
• Familiarity with OWASP Top 10 for LLM Applications and MITRE ATLAS.
• Experience in security governance, risk assessments, and regulatory compliance.
• Experience in enterprise security architecture documentation and security reference models.

Experience & Qualifications

• 10–15 years of overall experience in Information Security / Cybersecurity.
• Significant experience in designing and implementing enterprise security architecture.
• Demonstrated experience working with application development, DevOps, cloud, and infrastructure teams.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Strong communication, stakeholder management, analytical, and problem-solving skills.