Solution Architect

HCL Technologies Limited; Pune District; On-site; INR 3,800,000 - 7,500,000; Full time

Job summary

HCL Technologies Limited is seeking an experienced Cloud Security & AI Security Architect to lead the design, implementation, and governance of secure cloud and AI environments on Google Cloud Platform (GCP). The role requires deep expertise in cloud security, IAM, AI/GenAI security, zero trust architecture, risk assessment, and governance frameworks.

You will collaborate with enterprise architects, cloud engineers, AI teams, and business stakeholders to embed security-by-design across the

Qualifications

• Experience designing cloud security architectures on GCP.
• Strong knowledge of IAM, zero trust, and security governance.
• Familiarity with ISO 27001 and NIST frameworks.
• Security-by-design mindset with hands-on implementation skills.

Responsibilities

• Design and implement enterprise-grade cloud security architectures on GCP.
• Develop security blueprints and reference architectures for cloud-native apps and services.
• Define and enforce cloud security standards, policies, and best practices.
• Lead security reviews for modernization, microservices, APIs, and AI/ML solutions.
• Ensure security controls align with regulatory requirements.

Skills

Cloud Security Architecture

Security-by-Design

CSPM

Multi-Cloud Security Concepts

Education

Google Professional Cloud Security Engineer

Google Professional Cloud Architect

CISSP

CCSP

CISM

CEH

GIAC Cloud Security Certifications

NIST Cybersecurity Framework Certifications

Tools

GCP IAM

Identity Federation

Single Sign-On (SSO)

OAuth 2.0

OpenID Connect

Privileged Access Management (PAM)

RBAC and ABAC Models

Job description

Cloud Security & AI Security Architect – Google Cloud Platform (GCP)

Job Summary

We are seeking an experienced Cloud Security & AI Security Architect to lead the design, implementation, and governance of secure cloud and AI environments on Google Cloud Platform (GCP). The ideal candidate will possess deep expertise in Cloud Security, Identity and Access Management (IAM), AI/GenAI Security, Zero Trust Architecture, Risk Assessment, Security Governance, and Compliance Frameworks such as ISO 27001 and NIST.

The role involves securing enterprise cloud workloads, AI/ML platforms, GenAI solutions, and data ecosystems by establishing robust security controls, governance frameworks, and compliance standards. The candidate will collaborate with enterprise architects, cloud engineers, AI teams, and business stakeholders to ensure security-by-design principles are embedded throughout the technology landscape.

Key Responsibilities

Cloud Security Architecture

• Design and implement enterprise-grade cloud security architectures on GCP.
• Develop security blueprints and reference architectures for cloud-native applications and services.
• Define and enforce cloud security standards, policies, and best practices.
• Lead security reviews for application modernization, microservices, APIs, and AI/ML solutions.
• Ensure security controls align with organizational and regulatory requirements.

Identity & Access Management (IAM)

• Design and manage enterprise IAM strategies using GCP IAM.
• Implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
• Enforce least-privilege access principles across cloud platforms and AI workloads.
• Design privileged access management solutions and secure service account strategies.
• Integrate IAM with enterprise directories, SSO, and federated identity solutions.

AI and GenAI Security

• Define security frameworks for AI/ML and Generative AI platforms.
• Secure AI pipelines, model development, training, deployment, and inference environments.
• Perform risk assessments for LLMs, RAG systems, and AI agents.
• Establish controls against prompt injection, model poisoning, data leakage, and adversarial attacks.
• Implement AI governance policies, monitoring, and responsible AI principles.
• Collaborate with data scientists and AI engineers to ensure secure AI adoption.

Zero Trust Security Implementation

• Develop Zero Trust Architecture strategies across cloud, applications, and data layers.
• Implement continuous verification, device trust, identity validation, and secure access controls.
• Design network segmentation and micro-segmentation models.
• Establish secure communication between cloud workloads and enterprise applications.
• Reduce attack surfaces through adaptive trust mechanisms.

Security Governance & Compliance

• Define security governance frameworks, policies, standards, and procedures.
• Ensure compliance with ISO 27001, NIST Cybersecurity Framework, CIS Benchmarks, and organizational security standards.
• Lead governance reviews and security audits.
• Establish security metrics, KPIs, dashboards, and executive reporting mechanisms.
• Support internal and external audits and regulatory compliance assessments.

Risk Assessment & Security Operations

• Conduct enterprise risk assessments and cloud security posture reviews.
• Identify vulnerabilities, threats, and security gaps across cloud environments.
• Recommend remediation strategies and risk mitigation plans.
• Lead threat modeling exercises for cloud and AI platforms.
• Collaborate with SOC teams for incident response and security monitoring.

GCP Security Platform Management

• Implement and manage GCP-native security services.
• Configure cloud security controls across Compute Engine, GKE, Cloud Storage, BigQuery, Vertex AI, and networking services.
• Manage encryption, key management, secrets management, and data protection mechanisms.
• Establish logging, monitoring, and security event management solutions.
• Continuously improve cloud security posture management processes.

Skill Requirements

• Cloud Security Architecture
• Security-by-Design
• Cloud Security Posture Management (CSPM)
• Multi-Cloud Security Concepts

Identity & Access Management

• GCP IAM
• Identity Federation
• Single Sign-On (SSO)
• OAuth 2.0
• OpenID Connect
• Privileged Access Management (PAM)
• RBAC and ABAC Models

AI Security

• AI/ML Security
• Generative AI Security
• LLM Security
• AI Governance
• Data Privacy and Responsible AI

Security Frameworks & Standards

• ISO 27001
• NIST Cybersecurity Framework
• Security Control Frameworks

GCP Security Services

• Security Command Center
• VPC Service Controls
• BeyondCorp Enterprise
• Vertex AI Security Controls

Security Assessment & Governance

• Threat Modeling
• Vulnerability Assessments
• Security Audits
• Compliance Reporting
• Security Governance

Other Requirements

• Google Professional Cloud Security Engineer
• Google Professional Cloud Architect
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• CISM (Certified Information Security Manager)
• Certified Ethical Hacker (CEH)
• GIAC Cloud Security Certifications
• NIST Cybersecurity Framework Certifications

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.