Role Overview

The Security Architect is a cross-domain cybersecurity authority responsible for designing and positioning end-to-end security architectures spanning Network Security, End User Computing (EUC) Security, and Data Centre Security. The role serves both ISP clients (managing telco-grade security infrastructure) and MSI customers (enterprise security transformation). A strong commercial mindset and pre-sales ability are essential to position security as a value driver rather than a cost centre.

◆ Key Responsibilities

- Architect holistic security solutions covering perimeter, internal segmentation, endpoint, cloud, and identity layers
- Design network security solutions: NGFW, IPS/IDS, SD-WAN security overlays, DDoS protection, and carrier-grade NAT/CGN security
- Architect End User Computing security — endpoint protection platforms (EPP), EDR/XDR, VDI security, email security, and web proxy/filtering
- Design Data Centre security: micro-segmentation, East-West firewall controls, WAF, privileged access management (PAM), and Zero Trust Architecture (ZTA)
- Position and architect SASE (Secure Access Service Edge) and SSE solutions — Zscaler, Prisma Access, Cato Networks
- Develop SOC design frameworks, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar), and SOAR playbooks
- Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI-DSS, GDPR, NCA ECC in KSA/UAE)
- Respond to security-focused RFPs, build BoMs, and lead technical presentations to CISO-level stakeholders
- Maintain strong OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, CrowdStrike, Microsoft, Zscaler, and Milestone PSIM/VMS
- Provide guidance on ICCC (Integrated Command & Control Centre) security integration — PSIM, video surveillance, access control

◆ Technical Expertise — Hands-On Requirements

- Palo Alto Networks: PAN-OS, Panorama, Prisma Access, Prisma Cloud — hands-on deployment and policy management
- Fortinet: FortiGate, FortiManager, FortiAnalyzer,



FortiClient EMS — advanced routing security and SD-WAN integration
- Check Point: Smart Console, CPUSE, CloudGuard — policy administration and HA deployment
- Microsoft 365 Defender stack: Defender for Endpoint, Identity, Cloud Apps, and Sentinel SIEM
- Network segmentation: VLANs, ACLs, micro-segmentation with VMware NSX-T or Illumio
- Identity and access management: Active Directory, Azure AD, Okta, CyberArk PAM
- Vulnerability management tools: Tenable Nessus, Qualys, Rapid7 — enterprise scanning and reporting
- ICCC / Physical Security integration: Milestone XProtect, Genetec, Lenel, Honeywell Pro-Watch — understanding of video analytics and access control
- Cloud security posture management (CSPM) on AWS, Azure, and GCP

◆ Certifications — Beginner to Expert

Level

Certification

Vendor/Body

Priority

Beginner

CompTIA Security+

CompTIA

Recommended

Beginner

Cisco CyberOps Associate

Cisco

Recommended

Intermediate

CEH (Certified Ethical Hacker)

EC-Council

Mandatory

Intermediate

Palo Alto PCNSE

Palo Alto Networks

Mandatory

Intermediate

Fortinet NSE 4/6/7

Fortinet

Mandatory

Intermediate

Microsoft SC-200 / AZ-500

Microsoft

Mandatory

Advanced

CISSP

ISC²

Mandatory

Advanced

CISM

ISACA

Preferred

Advanced

Cisco CCNP / CCIE Security

Cisco

Preferred

Advanced

Check Point CCSE / CCCE

Check Point

Preferred

Advanced

Palo Alto PCNSC / PCSAE

Palo Alto Networks

Preferred

Expert

OSCP (Offensive Security)

Offensive Security

Added Advantage

Expert

AWS / Azure Security Specialty

Amazon / Microsoft

Added Advantage

Expert

Zscaler ZCCA-IA / ZCCP

Zscaler

Added Advantage

◆ Educational Qualifications

- Mandatory: B.E. / B.Tech in Electronics & Communication,



Computer Science, Information Technology, or Telecommunications
- Equivalent: BCA / MCA / M.Sc. (IT/Networks) — considered with strong industry experience
- Preferred: Postgraduate qualifications (M.Tech / MBA in Technology Management) are a distinct advantage

◆ Pre-Sales & Communication Skills

Candidates must demonstrate strong pre-sales aptitude and communication capability:

- Ability to translate complex technical architectures into clear, compelling business narratives for C-suite and non-technical stakeholders
- Experience in responding to RFPs, RFIs, and tenders — including solution write-ups, BOQs, and commercial inputs
- Skilled in conducting customer workshops, discovery sessions, and proof-of-concept (PoC) demonstrations
- Ability to create high-quality solution presentations, architecture diagrams, and proposals independently
- Comfortable presenting to diverse audiences — from NOC engineers to CTO/CIO level executives
- Strong written English for proposal and documentation; proficiency in MS Office / Visio / draw.io
- Active listening skills to identify unstated customer pain points and shape solutions accordingly
- Experience working alongside sales teams in deal pursuit, customer engagement, and solution shaping

◆ Soft Skills & Leadership Attributes

- Self-driven skilled with the ability to manage multiple pursuits simultaneously under deadline pressure
- Collaborative team player who can mentor junior engineers and guide solution reviews
- Willingness to travel to customer sites, partner offices, and OEM briefings as required
- Intellectual curiosity — stays updated with emerging technologies and market trends
- Ability to engage with OEM vendor teams (Cisco, Juniper, Nokia, Ericsson, ZTE, Fortinet, Palo Alto, etc.) for deal support and design validation

Pay: ₹1,200,000.00 - ₹1,800,000.00 per year

Benefits:

- Cell phone reimbursement
- Health insurance
- Leave encashment
- Provident Fund

Work Location: In person

📌 Security Architect (Panampilly Nagar)
🏢 Kerala Vision Broadband pvt.ltd
📍 Panampilly Nagar