IT Security Architect

Lonza; Hyderabad; On-site; Confidential; Full time

Job summary

Lonza is seeking an IT Security Architect to strengthen security across on‑premises, cloud, and integration environments. You will guide design with security-by-design, review APIs, and ensure encryption and data protection across solutions.

This role supports project teams and improves documentation and development practices. The ideal candidate will have strong IT security architecture experience, Azure cloud security expertise, IAM management skills, and a solid understanding of data

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, IT, or related field (or equivalent experience).
• Strong experience in IT security architecture across infrastructure, applications, and integrations.
• Experience with cloud environments, particularly Microsoft Azure, and cloud security principles.
• Knowledge of security controls for on-premises infrastructure (system hardening, network segmentation, identity management, logging).
• Experience reviewing integrations and APIs with secure authentication and data protection practices.
• Understanding of application security and secure development principles.

Responsibilities

• Conduct Security Architecture Reviews for new and existing IT solutions, including infrastructure, cloud, applications, and integrations.
• Assess and validate security controls for solution architectures (authentication, logging, encryption, API security, secure integration patterns).
• Identify security risks and recommend mitigation measures to ensure solutions meet required protection levels before deployment.
• Provide security guidance to project teams during design and build phases, ensuring security-by-design principles are applied.
• Review integrations and APIs to ensure secure data exchange and appropriate protection mechanisms for services and external connections.
• Evaluate and recommend security measures tailored to operational constraints and risk profiles.
• Provide guidance on secure coding principles and application security controls.
• Promote secure handling of data within applications and services.
• Support teams in adopting secure development practices across the lifecycle.
• Assist teams in producing clear and accurate technical architecture documentation, including diagrams.

Skills

Security Architecture

Cloud Security (Azure)

IAM

Network Security

Application Security

Risk Assessment

Security-by-Design

Encryption & Data Protection

Education

Bachelor’s or Master’s degree in Computer Science, Information Security, IT, or related field

Job description

The IT Security Architect is responsible for reviewing, assessing, and strengthening the security architecture of IT solutions across on-premises, cloud, and integration environments. The role ensures that systems are designed and implemented according to security standards, hardening guidelines, and industry best practices. By supporting project teams during design and build phases, the IT Security Architect helps ensure secure implementation from the outset, while adapting controls to both IT and Operational Technology (OT) environments. The position also contributes to improving technical documentation practices and promotes secure development principles throughout the lifecycle.

What You Will Do

Security Architecture Reviews

• Conduct Security Architecture Reviews for new and existing IT solutions, including infrastructure, cloud, applications, and integrations
• Assess and validate security controls for solution architectures (authentication, logging, encryption, API security, secure integration patterns)
• Identify security risks and recommend mitigation measures to ensure solutions meet required protection levels before deployment

Project & Solution Support

• Provide security guidance to project teams during design and build phases, ensuring security-by-design principles are applied
• Review integrations and APIs to ensure secure data exchange and appropriate protection mechanisms for services and external connections
• Evaluate and recommend security measures tailored to operational constraints and risk profiles

Secure Development Practices

• Provide guidance on secure coding principles and application security controls
• Promote secure handling of data within applications and services
• Support teams in adopting secure development practices across the lifecycle
• Assist teams in producing clear and accurate technical architecture documentation, including diagrams
• Provide guidance, tools, or automation to improve documentation qualityCollaborate with stakeholders to ensure security concepts are clearly communicated and understood

Job Requirements

• Security Architecture: Ability to review and design IT systems, identifying and mitigating security risks
• Cloud Security (Azure): Expertise in securing cloud services including access, network, and configuration management
• Identity & Access Management (IAM): Experience managing users, roles, permissions, and multi-factor authentication (MFA)
• Network Security: Strong knowledge of segmentation, firewalls, and secure connectivity practices
• Application & API Security: Ability to secure applications and integrations through authentication, data protection, and secure exchange mechanisms
• Risk Assessment: Skilled in identifying, prioritizing, and mitigating security risks across diverse environments
• Security-by-Design: Proven ability to integrate security controls early in solution design and development
• Encryption & Data Protection: Expertise in protecting sensitive data at rest and in transit

What We Are Looking For

• Bachelor’s or Master’s degree in Computer Science, Information Security, IT, or related field (or equivalent experience)
• Strong experience in IT security architecture across infrastructure, applications, and integrations
• Experience with cloud environments, particularly Microsoft Azure, and cloud security principles
• Knowledge of security controls for on-premises infrastructure (system hardening, network segmentation, identity management, logging)
• Experience reviewing integrations and APIs with secure authentication and data protection practices
• Understanding of application security and secure development principles

Skills

• Strong analytical and problem-solving skills for complex technical environments
• Ability to work autonomously and manage priorities across multiple reviews and projects
• Excellent written and verbal communication skills for technical and non-technical stakeholders
• Strong organizational and coordination skills (scheduling, follow-ups, tracking outcomes)
• Team-oriented mindset with a collaborative approach
• Positive attitude, adaptability to new technologies, and evolving security challenges
• Strong attention to detail in reviewing documentation and designs