Within the context of Sodexo’s global digital transformation and as part of the Global Information and Cybersecurity Team, the Security Architect is responsible for ensuring that cloud solutions and digital initiatives are designed and review to ensure secure implementation.

The role provides security architecture expertise across cloud transformation programs, with a primary focus on the Microsoft Azure ecosystem with other cloud experience as added advantage skill. The Security Architect works closely with business, technology, architecture, and security teams to identify security risks, define appropriate security requirements, and ensure that both cloud-native and migrated workloads comply with Sodexo’s security principles, policies, and standards.

The role also contributes to strengthening Sodexo’s cloud security posture by defining security architecture patterns, supporting security governance, and enabling projects to adopt secure-by-design principles throughout their lifecycle.

Key Responsibilities:

- Security Architecture: Define technical and functional security requirements for strategic cloud and digital initiatives, covering areas such as identity and access management, network security, data protection, application security, API/integration security, data security and cloud infrastructure.
- Security-by-Design: Provide security architecture guidance to projects from early design through implementation, ensuring security requirements are incorporated before go-live and deployment.
- Cloud Security: Review Microsoft Azure services and other cloud, architectures, and implementation patterns and establish appropriate security requirements aligned with the Sodexo Security Framework and directives.
- Architecture & Risk Assessment: Assess solution architectures, identify security risks and design gaps, recommend mitigating controls, and support projects in making appropriate risk-based security decisions.
- Cloud Governance: Contribute to the definition and continuous improvement of cloud security architecture principles, policies, directives, standards, guidelines, and reusable security patterns.




- Digital Identity & Access Management: Define security requirements for digital identities, authentication, authorization, privileged access, workload identities, and service-to-service integrations.
- Cloud Integration Security: Review integrations between cloud, SaaS, on-premises, and external platforms and define appropriate security controls for APIs, data flows, connectivity, authentication, and authorization.
- Cloud Security Initiatives: Lead or contribute to cloud security projects, including requirements definition, technical evaluation, solution selection, testing, implementation, and transition into operational use.
- Business & Regional Support: Support regions, Business Units, CIO organizations, Solution Architects, and project teams in securely migrating or deploying applications and workloads into Sodexo’s public cloud environment.
- Security Advisory: Analyze business and IT requirements that may impact the confidentiality, integrity, or availability of Sodexo information and systems and recommend appropriate security measures.
- Stakeholder Collaboration: Work closely with business owners, IT teams, Enterprise and Solution Architects, Governance and risk team, Security operation team, Data protection team, legal, Internal Audit, external auditors, and technology partners to enable secure business transformation.
- Continuous Improvement: Monitor emerging cloud technologies, security threats, architecture practices, and industry developments and use these insights to continuously improve Sodexo’s cloud security architecture

Required Skills & Experience

- Bachelor’s degree in computer science, Cybersecurity, Information Security, or related discipline. A master’s degree is preferred.




- 10+ years of experience in Information Security, with at least 2 year relevant experience in security architecture, consulting, engineering, risk management, or security audit.
- Strong hands-on knowledge of public cloud environments, preferably Microsoft Azure, and experience securing cloud-native and migrated workloads.
- Strong technical understanding across cloud infrastructure, networking, identity, systems, databases, applications, APIs, and data security.
- Good understanding of Identity and Access Management (IAM) principles, including authentication, authorization, privileged access, managed/workload identities, and least-privilege access.
- Experience performing security architecture reviews and risk assessments, with knowledge of methodologies and standards such as ISO 27005, EBIOS, ISO 27001, NIST, PCIDSS, GDPR or equivalent frameworks.
- Ability to translate business and technical requirements into practical and proportionate security controls and architecture requirements.
- Understanding of cloud security concepts including network segmentation, encryption, key management, secrets management, logging and monitoring, vulnerability management, secure integration, and Zero Trust principles.
- Relevant cloud certifications or training are preferred, such as Microsoft Azure security or architecture certifications and equivalent industry cloud security qualifications.
- Information Security certifications such as CISSP, CISM, CCSP, ISO 27001, or equivalent are considered an advantage.
- Strong analytical, problem-solving, and decision-making skills, with the ability to balance security, business requirements, architecture constraints, and operational needs.
- Solid interpersonal and communication skills, with the ability to explain complex security topics clearly and influence stakeholders across different levels of the organization.
- Ability to work effectively in a global, multicultural, and cross-functional environment.
- Fluent English with strong written and verbal communication skills.

📌 Security Architect (Gurugram)
🏢 Sodexo
📍 Gurugram