Role Overview:

The DevSecOps Cloud Security Architect is responsible for designing, implementing, and managing secure, automated, and compliant multi-cloud architectures supporting Mercyhealths Managed Detection Response (MDR) ecosystem

This role bridges cloud engineering, DevSecOps automation, and security operations , ensuring end-to-end protection, compliance, and resilience across hybrid workloads

The architect will integrate tools such as SentinelOne Complete EDR, FortiSIEM, FortiSOAR, UEBA, KnowBe4, and Vicarius , embedding them within CI/CD pipelines, Zero Trust frameworks, and cloud governance policies to achieve a unified security posture

Key Responsibilities:

Cloud Security Architecture

- Design and implement secure, scalable, and compliant multi-cloud (Azure/AWS) architectures aligned to HIPAA, HITRUST, and NIST 800-53 frameworks

- Integrate MDR solutions (SentinelOne, FortiSIEM, FortiSOAR, UEBA) into the broader cloud and DevSecOps ecosystem

- Architect and maintain Zero Trust Network Access (ZTNA) models leveraging Azure Entra ID, Conditional Access, and micro-segmentation

- Oversee deployment of SentinelOne agents and FortiSIEM collectors across user endpoints, servers, and cloud workloads

DevSecOps Automation:

- Embed security gates within CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) for code scanning, policy enforcement, and compliance validation

- Automate provisioning and configuration using Terraform, Ansible, and Bicep , with Policy-as-Code for audit traceability

- Integrate SOAR workflows to trigger automated remediation within build and deployment pipelines

- Develop scripts and APIs for orchestration between SentinelOne, FortiSOAR, and UEBA for real-time threat containment

Governance, Risk Compliance:





- Implement and maintain continuous compliance monitoring dashboards for HIPAA/HITRUST readiness

- Drive security governance reporting , aligning incident data with regulatory frameworks and internal audit cycles

- Ensure proper data encryption, key management, and least-privilege access policies across cloud resources

- Partner with compliance and privacy teams to support risk assessments, evidence gathering, and audits

Threat Vulnerability Management:

- Lead integration of Vicarius vulnerability prioritization and patch orchestration workflows

- Manage threat intelligence ingestion and correlation within FortiSIEM and UEBA for advanced detection

- Drive proactive threat hunting and continuous improvement through detection rule tuning and playbook enhancements

Collaboration Leadership:

- Serve as the technical escalation point for MDR and Cloud Security incidents

- Mentor DevSecOps engineers and MDR analysts (L1L3) in automation, response, and cloud security best practices

- Collaborate with infrastructure, application, and compliance teams to drive a unified security vision

- Present executive dashboards, RCA summaries, and architecture updates during governance and QBR sessions

Qualifications Experience:

- Bachelors or Masters degree in Computer Science, Cybersecurity, or related discipline

- 8 - 12 years of experience in cloud architecture, cybersecurity,



and automation

- Proven experience implementing DevSecOps pipelines with integrated security scanning and compliance enforcement

- Expertise in SentinelOne, FortiSIEM, FortiSOAR, and UEBA administration, deployment, and integration

- Strong understanding of Zero Trust , cloud identity and access management , and network segmentation

- Demonstrated success in healthcare or regulated industry environments

Technical Skills

Category Tools / Technologies Cloud Platforms Microsoft Azure, AWS, Azure GovCloud, Azure Sentinel Automation IaC Terraform, Ansible, Bicep, ARM Templates CI/CD Pipelines Azure DevOps, GitHub Actions, Jenkins Security Tools SentinelOne, FortiSIEM, FortiSOAR, UEBA, Vicarius, KnowBe4 Languages / APIs Python, PowerShell, REST API, JSON, YAML Frameworks NIST 800-53/171, HITRUST CSF, CIS Benchmarks, ISO 27001 Monitoring Analytics Power BI, Log Analytics, Grafana, Kibana

Certifications (Preferred)

- Microsoft Certified: Azure Solutions Architect Expert / Security Engineer Associate
- AWS Certified: Security Specialty
- Fortinet NSE 6/7 (Security Operations / SOAR)
- SentinelOne Certified Administrator (S1CA)
- CISSP, CISM, or GIAC Cloud Security Automation (GCSA)
- Certified DevSecOps Skilled (CDP)

Success Indicators

MDR tool uptime and integration stability across endpoints

reduction in manual remediation time through SOAR automation

Continuous compliance posture aligned with HIPAA/HITRUST

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 ASSOCIATE ARCHITECT - Security Operations (SOC) (Karnataka)
🏢 Happiest Minds Technologies
📍 Karnataka