Security Architect

r3 Consultant; Dadri; On-site; INR 167,400 - 279,000; Full time

Job summary

A consulting firm is looking for a mid-senior level Security Architect to define and maintain enterprise security architectures. You will be responsible for creating security blueprints, designing Zero Trust architectures, and ensuring compliance with various security regulations. The ideal candidate will have over 8 years of experience in cybersecurity, strong expertise in cloud security (preferably Azure), and relevant certifications such as CISSP. This is a full-time position based in Uttar Pradesh, India.

Qualifications

• 8+ years in cybersecurity or security architecture.
• Experience designing enterprise-grade security architectures.
• Core certifications like CISSP, CISM, or Microsoft security certifications.

Responsibilities

• Define and maintain enterprise security architectures.
• Design Zero Trust architectures and IAM solutions.
• Establish security guardrails and integrate DevSecOps practices.
• Design SIEM and SOAR architectures for monitoring.
• Ensure compliance with security and privacy regulations.
• Architect data protection and network security solutions.
• Mentor teams and present to senior leadership.

Skills

Knowledge of major security frameworks and standards

Expertise in IAM

Cloud security

Application security

Security operations

Network security

Encryption/data protection technologies

Job description

Security Architect

Join to apply for the Security Architect role at r3 Consultant.

Role Summary

Define and maintain enterprise security architectures covering applications, infrastructure, networks, data platforms, and cloud services, with Microsoft Azure as the primary platform. Embed security into transformation and AI‑driven initiatives, ensuring solutions are secure‑by‑design and compliant with insurance and financial‑services regulations.

Key Responsibilities

• Security architecture & design: Create reference architectures and security blueprints for cloud‑native, hybrid, and on‑prem environments, including microservices, APIs, data lakes, and AI/ML workloads; conduct architecture reviews and threat modeling using frameworks such as STRIDE, PASTA, and LINDDUN.
• Zero Trust & identity: Design and implement Zero Trust architectures, enterprise IAM on Azure AD/Entra ID, and modern authentication/authorization using SAML, OAuth 2.0, OpenID Connect, MFA, conditional access, RBAC, and ABAC.
• Cloud & application security: Establish security guardrails across Azure, AWS, and GCP; implement CSPM/CWPP, container and Kubernetes security, WAF, NSGs, and DDoS protection; integrate DevSecOps practices, secure coding standards, and SAST/DAST/SCA/IAST into CI/CD.
• Security operations & monitoring: Design SIEM and SOAR architectures (e.g., Microsoft Sentinel, Splunk, QRadar, Elastic), logging strategies, threat intelligence integration, and incident response capabilities including forensics and evidence handling.
• Compliance, risk & governance: Ensure alignment with frameworks such as NIST, ISO 27001, PCI‑DSS, SOC 2, GDPR, HIPAA, and insurance‑specific regulations; perform risk assessments, define security policies and standards, and track security KPIs.
• Data protection & network security: Architect encryption, DLP, key and certificate management, data classification, and privacy‑by‑design; design secure network architectures with segmentation, DMZs, VPN/ZTNA/SDP, IDS/IPS, NAC, and CDN security.
• Collaboration & leadership: Partner with enterprise and solution architects, DevOps, engineering, and business teams to embed security; mentor teams, lead design reviews and working groups, and present complex security topics to senior leadership.

Required Skills

• Deep knowledge of major security frameworks and standards (NIST CSF, ISO 27001/27002, CIS Controls, OWASP Top 10, SANS Top 25, Zero Trust Architecture, PCI‑DSS, HIPAA, GDPR, and insurance regulations).
• Strong expertise in IAM, cloud security (Azure preferred, plus AWS/GCP), application security, security operations (SIEM/SOAR, EDR/XDR), network security, and encryption/data protection technologies.

Experience & Certifications

• 8+ years in cybersecurity, security engineering, or security architecture, including 3+ years designing enterprise‑grade security architectures, ideally in insurance or financial services.
• Proven experience implementing Zero Trust, architecting on Microsoft Azure, conducting threat modeling and architecture reviews, and supporting compliance certifications such as SOC 2, ISO 27001, and PCI‑DSS.
• Core certifications: CISSP, CISM, CCSP, and Microsoft security certifications (e.g., Security Operations Analyst Associate or Azure Security Engineer Associate); additional certifications such as CEH, GIAC, OSCP, and CISA are a strong plus.

Key Competencies

• Insurance domain security, including protection of PII, claims, and financial data, and understanding of Solvency II, state regulations, GDPR, and CCPA.
• Technical leadership, risk‑based decision‑making, and a strong focus on innovation and continuous learning.

Seniority Level

Mid‑Senior level.

Employment type

Full‑time.

Job Function

Information Technology.

Industries

Staffing and Recruiting.