Security Architect

Tech Mahindra; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Tech Mahindra in Bengaluru seeks a seasoned Security Architect to lead architectural risk assessments and guide secure design across cloud-first, hybrid and legacy environments.

You will define enterprise security guardrails, apply least-privilege principles, and represent security in governance forums, with a focus on avoiding hands-on DevSecOps work.

Qualifications

• 8+ years of enterprise security experience.
• Experience in cloud security across AWS and/or Azure.
• Experience with governance processes and security reviews.
• Strong communication skills in written and verbal.

Responsibilities

• Conduct in-depth security architecture reviews and identify unsafe or noncompliant design patterns.
• Define secure design principles aligned with enterprise risk appetite and guardrails.
• Represent Security Architecture in governance boards, architecture review committees, and solution approval processes.
• Ensure alignment with leading industry frameworks such as NIST CSF and ISO 27000 series.

Skills

Cloud security

Security architecture reviews

Governance

AWS

Azure

Communication

Job description

We are seeking a seasoned Security Architect with deep expertise in cloud security and enterprise governance to lead architectural risk assessments and guide secure design practices across complex cloudâ€`first, hybrid, and legacy environments. This role emphasizes seniorâ€`level architectural judgment, strategic oversight, and governance leadership rather than handsâ€`on implementation or DevSecOps execution. The ideal candidate will provide authoritative security direction, define enterprise security guardrails, and represent the security function effectively in crossâ€`functional governance forums.

Role Summary

The Security Architect will conduct inâ€`depth security architecture reviews, evaluating proposed solutions to identify unsafe, highâ€`risk, or nonâ€`compliant design patterns. This role involves defining secure design principles aligned with enterprise risk appetite and ensuring that architectural decisions meet required standards for confidentiality, integrity, availability, and resilience. The architect will guide teams in applying leastâ€`privilege and leastâ€`functionality principles, particularly within identity and access management models.

Core Responsibilities

The role includes assessing cloudâ€`hosted, onâ€`premises, and multiâ€`tier architectures to ensure proper segmentation, secure identity models, adequate logging, and layered control mechanisms. The architect will perform structured risk assessments, clearly articulating acceptable versus unacceptable risk levels, and recommending secure architectural alternatives. Representing the Security Architecture team in governance boards, architecture review committees, and solution approval processes is a key aspect of this position. The architect will ensure ongoing alignment with leading industry frameworks such as NIST CSF and the ISO 27000 series, maintaining consistency with enterpriseâ€`wide security guardrails.

Required Experience

Candidates must bring at least 8+ years of enterprise security experience, with a strong background in conducting security architecture reviews. Expertise in cloud security across AWS and/or Azure is essential, along with experience enforcing security controls and policies in largeâ€`scale enterprise environments. Familiarity with governance processes, architectural review boards, and secure design assessments is required. Experience with AI security and evaluating risks associated with generative AI and LLM technologies is an added advantage. Strong communication skills‿both written and verbal‿are critical.

Required Certifications

At least one of the following is required: CISSP (strongly preferred), CCSP, CISM, AWS Security Specialty, Azure Security Engineer, or an equivalent seniorâ€`level cloud security certification.