Incharge - Security Architecture & Engineering

Skillventory; Hyderabad; On-site; INR 5,000,000 - 7,000,000; Full time

Job summary

Skillventory is seeking an experienced Senior Security Architect in Hyderabad to define and own the enterprise security architecture in alignment with business and regulatory needs. You will lead end-to-end security design across network, application, identity, and data layers, and drive security engineering initiatives from concept to deployment.

You will also oversee IAM, asset hardening, and governance for PAM/PIM, while guiding procurement, budgeting and vendor negotiations to optimize

Qualifications

• 15+ years of progressive experience in cybersecurity with at least 4–5 years in a leadership or architecture role.
• Hands-on experience with Firewalls, WAF, DLP, DAM, ZTNA, PAM, and PIM.
• Strong knowledge of Windows and Linux operating systems and Active Directory.
• Exposure to AI/ML security concepts and security procurement processes.

Responsibilities

• Define and own enterprise security architecture aligned to business and regulatory requirements.
• Lead end-to-end design and implementation of security controls across network, application, identity, and data layers.
• Drive security engineering initiatives from concept through deployment and operations.
• Oversee security tooling across network, perimeter, and asset hardening.
• Oversee procurement, budgeting, vendor evaluations and contract negotiations for security tools.

Skills

Security architecture

Leadership

Networking

Windows & Linux

Active Directory

PAM & PIM

AI security

Regulatory knowledge

Budget planning

Tools

Firewalls

WAF

DLP

ZTNA

PAM

PIM

Job description

Key Responsibilities

Security Architecture & Engineering

• Define and own the enterprise security architecture aligned to business and regulatory requirements
• Lead end-to-end design and implementation of security controls across network, application, identity, and data layers
• Drive security engineering initiatives from concept through deployment and operationalization

Infrastructure & Network Security

• Oversee design, deployment, and lifecycle management of Firewalls, WAF, DLP, DAM, and ZTNA solutions
• Ensure network segmentation, perimeter security, and zero-trust principles are embedded in architecture decisions
• Review and approve network design changes from a security standpoint

Identity & Access Management

• Lead implementation and governance of PAM and PIM solutions
• Define access control policies and ensure least-privilege principles are enforced across privileged and non-privileged accounts

AI Security & Security AI

• Define the organization's strategy for securing AI/ML systems and models
• Identify and implement AI-driven tools for threat detection, anomaly detection, and security operations
• Stay current on emerging AI threat vectors and integrate mitigations into the security architecture

Asset Hardening & OS Security

• Establish and enforce hardening standards for Windows, Linux, and other IT assets
• Oversee Active Directory security configuration, GPO management, and identity hygiene
• Drive vulnerability management and configuration compliance programs

Procurement & Budgeting

• Own the security technology roadmap and associated capital and operational budgets
• Lead vendor evaluations, RFP/RFQ processes, and contract negotiations for security tools and services
• Optimize security spend while maintaining coverage and effectiveness

Key Requirements

• 15+ years of progressive experience in cybersecurity with at least 45 years in a leadership or architecture role
• Hands-on experience with: Firewalls, WAF, DLP, DAM, ZTNA, PAM, PIM
• Strong working knowledge of Windows and Linux operating systems and Active Directory
• Demonstrated experience in IT asset hardening and configuration management
• Exposure to AI/ML security concepts — both securing AI systems and leveraging AI for cyber defense
• Familiarity with security procurement, vendor management, and budget planning
• Strong understanding of network design principles and security architecture frameworks (SABSA, TOGAF, Zero Trust)

Good to Have

• Experience in BFSI, payments, or regulated industry environments
• Familiarity with regulatory frameworks such as RBI guidelines, ISO 27001, NIST CSF
• Exposure to PQC concepts and crypto-agility planning
• Relevant certifications: CISSP, CISM, SABSA, CCNP Security, or equivalent