Tower Lead - Azure & Cloud Security, Palo Alto Firewall

HCL Technologies Limited; Dadri; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

HCL Technologies Limited is seeking a Tower Lead for Azure & Cloud Security to drive IAM architecture, cloud security, and CSPM across multi-cloud environments. You will architect RBAC/ABAC, support SSO integrations, and implement CIEM and secrets management while partnering with DevOps to embed security in the deployment pipeline.

The role emphasizes DevSecOps, automation, and governance across major clouds (AWS/Azure/GCP) with a focus on compliance and secure design principles.

Qualifications

• Experience: 8+ years in cybersecurity engineering, with 5+ years in cloud security and IAM.
• Deep knowledge of identity protocols (OAuth 2.0, SAML, OIDC, SCIM) and API security.
• Automation via scripting (Python/PowerShell/Bash) and IaC (Terraform).

Responsibilities

• IAM Architecture & Governance design across multi-cloud systems.
• SSO, federation, and hybrid identity integrations using SAML/OIDC/OAuth.
• Cloud CSPM to remediate misconfigurations and enforce CIS SOC2 ISO standards.
• Secrets management using vaults and cloud-native tools.
• CIEM implementation and integration with SIEM/SOAR platforms.
• Policy as Code participation with guardrails using OPA and Azure/AWS policies.

Skills

Cloud security

IAM architecture

RBAC/ABAC

Policy as Code

DevSecOps

Scripting (Python)

CIEM

CIS Benchmarks

SOC2/ISO27001

SAML/OIDC/OAuth

Tools

HashiCorp Vault

AWS IAM Identity Center

Okta

Azure Key Vault

Terraform

SIEM/SOAR

Job description

Tower Lead - Azure & Cloud Security, Palo Alto Firewall Tower Lead - Azure & Cloud Security, Palo Alto Firewall India Job Description Tower Lead - Azure & Cloud Security, Palo Alto Firewall

Job Summary

Cloud security SME

Key Responsibilities

IAM Architecture & Governance: Design, implement, and govern enterprise cloud IAM frameworks across multi-cloud systems. Architect complex role-based access control (RBAC), attribute-based access control (ABAC), and conditional access policies to enforce absolute least-privilege access.Identity Federation & Single Sign-On (SSO): Architect and maintain enterprise directory integrations, hybrid identity synchronization, and SSO implementations using protocols like SAML 2.0, OIDC, and OAuth 2.0 via identity providers (e.g., Okta, Microsoft Entra ID, AWS IAM Identity Center).Cloud Security Posture Management (CSPM): Take technical ownership of cloud security posture tools to continuously monitor infrastructure. Proactively identify, prioritize, and remediate cloud misconfigurations, overly permissive policies, and compliance drifts (CIS Benchmarks, SOC2, ISO 27001).Secrets & Keys Management: Architect enterprise-wide strategies for secrets management, cryptographic key lifecycles, and certificate rotation using cloud-native tools or centralized vaults (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).Automated Threat Detection & CIEM: Deploy Cloud Infrastructure Entitlement Management (CIEM) tools to detect anomalies like privilege escalation risks and unused permissions. Integrate cloud security telemetry (e.g., AWS CloudTrail, Azure Activity Logs) into centralized SIEM/SOAR platforms.DevSecOps & Policy as Code: Partner with DevOps teams to integrate identity and security checks directly into the deployment pipeline. Embed security compliance early by authoring automated guardrails using Policy as Code (e.g., Open Policy Agent - OPA, AWS SCPs, Azure Policies).

Skill Requirements

Experience: 8+ years of dedicated professional experience in cybersecurity engineering, with at least 5+ years focusing strictly on cloud security and IAM architecture.Cloud Platform Mastery: Advanced, production-proven experience securing major public cloud infrastructure, specifically AWS, Microsoft Azure, or Google Cloud Platform (GCP).Deep Protocol Knowledge: In-depth engineering mastery of modern identity protocols (OAuth 2.0, SAML, OIDC, SCIM), API security architectures, and JSON/YAML-based policy syntax.Automation & Scripting: Strong capability to automate security configurations and audit tasks using scripting languages such as Python, PowerShell, or Bash, along with Infrastructure as Code (Terraform).Workload Security: Strong understanding of cloud-native computing security basics, including container security, serverless functions, and microservices architecture protection.

Other Requirements

NA

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.

Copyright © 2026 HCL Technologies Limited