The Lead Security Engineer is responsible for architecting, implementing, and governing ARCHER’s enterprise
security controls across hybrid environments. Reporting Associate Director IT and closing work with the Sr.
Director, Infrastructure & Security, this role provides hands-on technical leadership while guiding a team of
security engineers in the execution of security operations, architecture, monitoring, identity security, and
compliance initiatives. This position will play a key role in advancing ARCHER’s Zero Trust strategy,
strengthening enterprise defenses, and ensuring alignment with regulatory and governance frameworks such as
SOC 2, NIST, and ISO 27001.
Security Architecture & Engineering
• Lead the design and implementation of enterprise security architecture across on-prem and cloud environments.
• Architect secure Azure/AWS configurations, including IAM, network controls, and cloud-native security
tooling.
• Review and optimize Network Firewall/Switch deployments to establish least-privilege network access.
Threat Detection, Monitoring & Response • Manage Microsoft NDR/XDR platforms, ensuring effective alerting, tuning, and mitigation workflows.
• Oversee SIEM operations (Sumo Logic), including correlation rules, dashboards, and incident triage.
• Serve as Level 3 escalation for complex security incidents.
Identity, Access & Zero Trust
• Design and implement secure identity strategies using Microsoft Entra ID.
• Govern MFA, SAML, OIDC, RBAC, and Zero Trust policies across the enterprise.
Email Security & User Protection
• Manage DMARC, SPF, DKIM enforcement and email threat protection programs.
• Lead phishing simulation and user awareness programs.
Governance, Compliance & Risk Management
• Maintain security policies, playbooks,



and procedures aligned to SOC 2, NIST, ISO 27001.
• Lead SOC 2 audits, evidence collection, and remediation tasks.
• Conduct vulnerability assessments, risk reviews, and remediation oversight.
Leadership & Cross-Functional Collaboration
• Supervise, mentor, and guide a team of security engineers.
• Partner with Infrastructure, Cloud, DevOps, and AppDev teams to embed security into system design and
processes.
• Present executive-level reporting on security posture and risk.
Education and Experience
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or
equivalent handson experience.
• 8–10 years of experience in cybersecurity engineering, including securing hybrid cloud and onpremises
environments.
• Minimum 2–3 years leading, supervising, or mentoring a technical security engineering team.
• Experience working with SOC 2, NIST, or ISO 27001 frameworks.
• Master’s degree or security leadership certifications are a plus.
Technical Skills
• Expertlevel knowledge of network security technologies, including firewalls, VPN solutions, intrusion
detection/prevention systems, and secure network architecture principles.
• Strong handson experience securing Azure and AWS cloud environments, including IAM, network controls,
and cloudnative security tools.




• Deep expertise with Microsoft Defender NDR/XDR technologies (Defender for Endpoint, Identity, Cloud).
• Operational experience with Sumo Logic or similar SIEM platforms, including log ingestion, correlation,
and alert tuning.
• Strong understanding of identity security, MFA, SAML, OIDC, RBAC, and Zero Trust architectures.
KNOWLEDGE, SKILLS, ABILITIES AND RESPONSIBILITIES
Revision Date: 03/11/2026 Sr. Director, Infrastructure & Security Page 3
• Practical experience implementing DMARC, SPF, DKIM, and email threat protection technologies.
• Thorough knowledge of NIST, ISO 27001, SOC 2 Trust Services Criteria, and security governance best
practices.
• Scripting/automation experience (PowerShell, Python) is preferred.
Leadership and Communication
• Demonstrated success leading and developing highperforming security engineering teams.
• Ability to translate complex security risks, architecture considerations, and technical issues into clear
communications for executives and nontechnical stakeholders.
• Proven ability to manage crossfunctional relationships, build consensus, and influence security adoption
across engineering, cloud, infrastructure, and application teams.
• Robust experience conducting design reviews, leading incident response efforts, and enforcing best practices
across distributed environments.
Preferred Qualifications
• Experience working in environments handling sensitive data such as PHI/PII, healthcare, or legal service
industry contexts.
• Experience maturing SOC 2, NIST, or ISOaligned security governance programs.
• Background implementing or optimizing Zero Trust architectures.
• Certifications such as PCNSE, CISSP, SC100, AZ500, AWS Security Specialty, or SOC 2/NIST/ISO Lead
Implementer.

📌 Lead Security Engineer (Vadodara)
🏢 People First Consultants
📍 Vadodara