Principal Cybersecurity Engineer

Providence Global Center; Hyderabad; On-site; INR 3,000,000 - 5,500,000; Full time

Benefits offered by this job

Competitive Pay

Supportive Reporting Relation

Job summary

Providence Global Center in Hyderabad, India, seeks a Cybersecurity Principal Engineer to design, implement, and own the Azure Landing Zone security architecture, including policies, guardrails, RBAC models, and subscription strategy, while leading integration of tools like CrowdStrike, Proofpoint, Rapid7, Checkmarx, and Wiz.

You will drive security automation, Azure Policy implementations, SIEM/SOAR with Microsoft Sentinel, and risk governance, partnering with engineering, risk, compliance, and

Qualifications

• 10+ years of cybersecurity experience with 5+ years Azure cloud security focus.
• Strong expertise in identity governance and cloud security architectures.

Responsibilities

• Design, implement, and own Azure Landing Zone security architecture and policy guardrails.
• Lead enterprise security platforms integration (CrowdStrike, Proofpoint, Rapid7, Checkmarx, Wiz).
• Operate and mature Microsoft Sentinel SIEM/SOAR and risk reporting.

Skills

Azure security architecture

RBAC and IAM

DevSecOps

SAST/DAST

SIEM/SOAR

Threat intelligence

Incident response

Education

Bachelor’s degree or equivalent in a relevant field

Tools

CrowdStrike

Proofpoint

Rapid7

Checkmarx

Wiz

Microsoft Sentinel

Job description

Select how often (in days) to receive an alert:

Providence, one of the US's largest not-for-profit healthcare systems, is committed to high quality, compassionate healthcare for all. Driven by the belief that health is a human right and the vision, 'Health for a better world', Providence and its 121,000 caregivers strive to provide everyone access to affordable quality care and services.

Providence has a network of 51 hospitals, 1,000+ care clinics, senior services, supportive housing, and other health and educational services in the US.

Providence India is bringing to fruition the transformational shift of the healthcare ecosystem to Health 2.0. The India center will have focused efforts around healthcare technology and innovation, and play a vital role in driving digital transformation of health systems for improved patient outcomes and experiences, caregiver efficiency, and running the business of Providence at scale.

Why Us?

• Competitive Pay
• Supportive Reporting Relation

As a Cybersecurity Principal Engineer, you will

• Design, implement, and own the Azure Landing Zone security architecture, including:
• Azure Policies and Policy Initiatives
• Guardrails, RBAC models, management groups, and subscription architecture
• Lead implementation and day-to-day management of enterprise security platforms, including:
• CrowdStrike (endpoint protection, detection, and response)
• Proofpoint (email security, phishing protection, and threat intelligence)
• Rapid7 (vulnerability management, exposure analytics, and threat detection)
• Checkmarx (SAST, DAST, SCA, code security governance)
• Wiz (CNAPP / CSPM / workload and cloud risk visibility)
• Implement and operationalize Azure Policy for:
• Encryption, data residency, and compliance guardrails
• Deploy, tune, and manage:
• Container and AKS security controls
• Stand up and evolve Microsoft Sentinel (SIEM/SOAR):
• Data connectors, analytics rules, UEBA
• Threat enrichment and automated response playbooks
• Maintain enterprise risk register, report security KPIs to leadership, and partner with risk, compliance, and audit teams.
• Run purple-team style control validation, lead incident response runbooks, and drive post-incident improvements.
• Establish and govern network security architectures:

What would your day look like?

• Partner with Engineering, Network, and Platform teams to design and operate a secure, compliant Azure platform and Snowflake tenant.
• Analyze and audit platform and application codebases using Checkmarx and related tooling to identify vulnerabilities and compliance gaps.
• Act as a security authority on the Architecture Review Board, shaping approved application and cloud design patterns.
• Collaborate with vendors and partners on security assessments and remediation strategies (CrowdStrike, Proofpoint, Rapid7, Wiz).
• Continuously monitor threats and alerts; define SOPs and train L1/L2 teams for effective triage and escalation.
• Drive sprint delivery for security initiatives with high quality and on‑time execution.

Who are we looking for?

• 10+ years of cybersecurity experience with 5+ years focused on Azure cloud security architecture.
• Deep expertise in:

PIM / PIM for Groups, Identity Governance

Strong hands-on experience with:

CrowdStrike, Proofpoint, Rapid7, Checkmarx, Wiz

Defender for Cloud, Microsoft Sentinel, Azure Firewall, WAF

• Proven experience delivering Azure Landing Zones aligned to Microsoft Cloud Adoption Framework and Well-Architected principles.
• Strong identity federation knowledge (SAML, OAuth2/OIDC), SCIM provisioning, and B2B integrations.
• Automation-first mindset with PowerShell, Python, Terraform, Bicep, Git, YAML, and CI/CD workflows.

Required Skills:

• Expert-level Microsoft Entra ID, Conditional Access, PIM, RBAC, and identity governance
• Enterprise-scale Azure network security and private connectivity design
• Deep experience implementing CNAPP, EDR, email security, vuln management, and code security platforms
• Strong DevSecOps background including SAST/DAST, IaC scanning, and API security
• Mature incident response, observability, and alert tuning experience
• Familiarity with AI/LLM security patterns (Azure OpenAI, RAG architectures)
• Strong experience with Azure network security, including VNet architecture, private endpoints, DDoS, WAF, and Azure Firewall
• Hands-on experience implementing Defender for Cloud, Sentinel SIEM/SOAR, and cloud threat-detection pipelines
• Demonstrated ability to design Azure Policy, policy-as-code, and compliance automation for SOC2/ISO/HIPAA
• Deep understanding of Key Vault, CMK encryption, data protection, and secure data pipelines
• Proven background in DevSecOps, secure CI/CD, IaC (Terraform/Bicep), SAST/DAST, and API security
• Strong capability in observability, logging, alert tuning, and incident response automation
• Experience building secure Azure Landing Zones and enterprise cloud architecture.

Providence's vision to create 'Health for a Better World' aids us to provide a fair and equitable workplace for all in our employment, whether temporary, part-time or full time, and to promote individuality and diversity of thought and background, and acknowledge its role in the organization’s success. This makes us committed towards equal employment opportunities, regardless of race, religion or belief, color, ancestry, disability, marital status, gender, sexual orientation, age, nationality, ethnic origin, pregnancy, or related needs, mental or sensory disability, HIV Status, or any other category protected by applicable law. In furtherance to our mission in building a more inclusive and equitable environment, we shall, from time to time, undertake programs to assist, uplift and empower underrepresented groups including but not limited to Women, PWD (Persons with Disabilities), LGTBQ+ (Lesbian, Gay, Transgender, Bisexual or Queer), Veterans and others. We strive to address all forms of discrimination or harassment and provide a safe and confidential process to report any misconduct.

Providence Global Center 8th Floor, Skyview 1083/1, Raidurgam,
Hitech City Main Rd, Hyderabad, Telangana 500081, India