Security Architect

Accenture in India; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Accenture in India is seeking a Security Architect to define and govern cloud security architecture and to manage the network security domain from Mumbai. You will oversee network protection across on-premises, hybrid and cloud environments, guiding a team of engineers and coordinating with SOC, IR and IT teams.

The role emphasizes secure architecture, policy enforcement and continuous improvement to protect critical assets and reduce risk in line with global standards.

Qualifications

• Minimum 7 years of experience in Network Security Operations.
• 15 years full time education required.

Responsibilities

• Oversee the design, implementation and ongoing improvement of the network security infrastructure.
• Lead day-to-day management of network security devices including firewalls, VPNs, IPS/IDS, proxies, WAFs, DDoS systems and segmentation.
• Coordinate with vendors for support, patching and upgrades.
• Drive Zero Trust segmentation and secure hybrid/cloud connectivity.
• Mentor and manage a team of network security engineers; ensure SLA/OLA compliance.
• Collaborate with SOC, IR, threat hunting and IT teams for coordinated defense.
• Present network security posture, risks and improvements to leadership.
• Ensure compliance with ISO 27001, NIST, PCI-DSS and internal risk/audit requirements.

Skills

Network Security Operations

Zero Trust

Cloud security

Threat monitoring

Education

15 years full time education

Tools

Palo Alto

Cisco ASA/Firepower

Zscaler

Prisma Access

Azure WAF

Palo Alto Panorama

Job description

Job Description:

Project Role :

Security Architect

Project Role Description :

Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security-controls and transition to cloud security-managed operations.

Must have skills :

Network Security Operations

Good to have skills :

NA

Minimum 12 Year(s) Of Experience Is Required

Educational Qualification :

15 years full time education

Summary:

The Network Security Management Lead is responsible for overseeing the design, implementation, management, and continuous improvement of the organization s network security infrastructure. This role ensures robust protection of network boundaries, internal segments, cloud environments, and critical assets while leading a team of network security engineers. The Lead also collaborates closely with SOC, Cloud, IT, and Architecture teams to strengthen overall cyber resilience.

Roles & Responsibilities:

• Network Security Operations & Management
• Lead day-to-day management of network security devices including firewalls, VPNs, IPS/IDS, proxies, WAFs, DDoS systems, and segmentation solutions.
• Ensure continuous availability, performance, and health of network security infrastructure.
• Coordinate with vendors for support, patching, and upgrades.
• Review firewall policies, NAT rules, URL filtering, IPS signatures, and ensure optimal configurations.
• Security Architecture & Design
• Develop and implement secure network architecture aligned with best practices.
• Drive Zero Trust segmentation, secure hybrid/cloud connectivity, and micro-segmentation initiatives.
• Participate in solution design reviews and assess network security impact of new projects.
• Ensure alignment of network security controls with overall cybersecurity strategy.
• Team Leadership & Stakeholder Collaboration
• Lead, mentor, and guide a team of network security engineers.
• Allocate resources, manage workloads, and ensure SLA/OLA compliance.
• Work closely with SOC, IR, threat hunting, and IT/network teams for coordinated defense.
• Present network security posture, risks, and improvements to leadership.
• Incident Response & Threat Mitigation
• Act as SME during network-related security incidents.
• Support SOC and IR teams with packet analysis, firewall log analysis, and malicious traffic investigation.
• Implement immediate containment controls during active threats (e.g., blocking IPs, disabling routes, isolating segments).
• Conduct root cause analysis and implement corrective actions.
• Policy, Governance & Compliance
• Maintain network security standards, hardening guidelines, and baseline configurations.
• Ensure compliance with ISO 27001, NIST, PCI-DSS, and internal risk/audit requirements.
• Conduct periodic firewall rule audits, recertifications, and access reviews.
• Maintain complete and updated documentation: topology diagrams, policies, runbooks, inventory.
• Continuous Improvement & Innovation
• Identify opportunities to automate network security processes through SOAR/Scripting/API automation.
• Evaluate emerging technologies such as SASE, ZTNA, SD-WAN, and cloud-native firewalls.
• Drive initiatives to improve threat visibility and reduce attack surface.

Professional & Technical Skills:

• Expertise with network security platforms (any combination):
• Palo Alto, Cisco ASA/Firepower, , Zscaler, Prisma Access, Akamai, Cloud Azure WAF.
• Hands-on experience with:
• Palo Alto NG FW, Palo Alto IPS/IDS, Panorama

Prisma Access/ GlobalProtect VPN

• Azure WAF
• Azure Bastion hosts (AVD)
• MIST AP (Important)
• Firewall policy design & optimization
• IPS/IDS, proxy, URL filtering, DNS security
• VPN/IPSec/SSL/Remote Access
• Network segmentation & micro-segmentation
• Cloud network security (AWS/Azure/GCP)
• Strong knowledge of network protocols: TCP/IP, BGP, OSPF, DNS, DHCP, VLANs, SD-WAN.
• Familiarity with packet capture tools (Wireshark, tcpdump) and traffic analysis.
• Scripting knowledge (Python, PowerShell, Bash) is added advantage.
• Leadership & Soft Skills
• Team management and mentoring experience.
• Strong problem-solving and decision-making skills.
• Preferred certifications:
• CCNP Security / CCIE Security
• PCNSE (Palo Alto)
• CISSP
• Cloud Security certifications (AZ-500, AWS Security, GCP Security

Additional Information:

• The candidate should have minimum 7 years of experience in Network Security Operations.
• This position is based at our M2B - STPI location.
• A 15 years full time education is required.