Track Manager (Support & Operations)

Hyderabad, Telangana

Job Summary

Key Responsibilities: Migration Security Architecture: Design and deploy secure, scalable Azure Landing Zones tailored for enterprise workload migrations (IaaS and PaaS). Network Security Governance: Architect and configure cloud network security controls, including Azure Firewall, Web Application Firewalls (WAF), Network Security Groups (NSGs), and Application Security Groups (ASGs). Identity & Access Control: Enforce strict Zero Trust principles using Microsoft Entra ID (formerly Azure AD), configuring Privileged Identity Management (PIM), RBAC, and Conditional Access policies. Threat Protection: Deploy and manage Microsoft Defender for Cloud (CSPM/CWPP) to assess the security posture of migrating servers, databases, and containers. Data Security & Encryption: Architect and manage Azure Key Vault for secure certificate, secret, and key management, ensuring encryption for data at rest and in transit. Compliance & Guardrails: Author and enforce Azure Policy initiatives to ensure all newly migrated cloud resources automatically comply with enterprise and regulatory standards. L3 Escalation: Act as the final technical resolver for complex migration-blocking security issues, such as routing blocks, authentication failures, or misconfigured VPN/ExpressRoute encryption.

Key Responsibilities

Technical: 10+ years of progressive cybersecurity experience, with at least 4 years dedicated to Microsoft Azure Security Architecture. Mastery of Azure network security topologies, including Hub-and-Spoke models, Private Link, and VNet Peering security. Deep technical capability with Microsoft Defender for Cloud and integrating cloud telemetry into SIEM solutions like Microsoft Sentinel. Strong hands-on experience securing hybrid identity models using Entra ID Connect and federation protocols.



Proficiency in Infrastructure as Code (IaC) security, capable of reviewing and hardening Terraform or Bicep deployment templates. Non-Technical Migration Risk Assessment: Proven capability to assess legacy on-premises applications, identify security gaps, and design cloud-native remediation paths prior to migration. Security by Design: Exceptional discipline in embedding strict security guardrails into project migration runbooks and CI/CD deployment pipelines. Stakeholder Alignment: Ability to negotiate and collaborate effectively with application owners, networking teams, and external auditors to approve migration cutovers. Technical Documentation: Excellence in writing high-level security blueprints, firewall rule-set justifications, and cloud security standard operating procedures (SOPs).

Skill Requirements

Good to Have Skills: Experience with multi-cloud security concepts (GCP / AWS) and third-party cloud security posture management (CSPM) tools like Prisma Cloud or Wiz. Understanding of container security (securing AKS clusters and container registries). Familiarity with data privacy frameworks (GDPR, HIPAA, SOC2) and translating them into technical Azure controls. Soft Skills: Confident Authority: Ability to halt a migration if critical security or compliance thresholds are not met, maintaining a firm but constructive stance. Cross-Functional Collaboration: A team player who integrates smoothly with Wintel, Database, and PMO teams to maintain migration velocity without compromising security. Clear Communication: Exceptional capability to explain complex cloud threats and security architectures to non-technical business sponsors. Certifications: AZ-500, SC-100 or CISSP, ITIL v4 Foundation. Overview Role – Migration Azure Security SME L3 Experience Level – 10+ years Job Location – Bengaluru / Hyderabad Job Type – Full time Support type - 24x7 Operational Support & Project Engagements

Other Requirements

📌 Track Manager (Support & Operations) (Hyderabad)
🏢 HCLTech
📍 Hyderabad