We are seeking an experienced Cloud Security Architect with 8 to 12 years of expertise in designing, implementing, and governing enterprise security architectures across cloud and hybrid environments. The ideal candidate will possess strong knowledge of Cryptography, Cloud Security Architecture, Identity & Access Management (IAM), Zero Trust Architecture, Kubernetes & Container Security, Network Security Architecture, and Infrastructure Security Controls. This role will be responsible for defining security strategies, ensuring compliance, and driving secure cloud adoption across the organization.

- Design and implement secure Cloud Security Architecture for AWS, Azure, and/or GCP environments.

- Develop and enforce enterprise-wide security architecture standards, frameworks, and best practices.

- Design and manage Identity & Access Management (IAM) solutions including RBAC, ABAC, MFA, PAM, SSO, and federation technologies.

- Lead the implementation of Zero Trust Security Architecture principles across cloud, infrastructure, applications, and user access layers.

- Define and oversee cryptographic controls, encryption strategies, key management, PKI, certificate lifecycle management, and data protection mechanisms.

- Architect and secure Kubernetes clusters, containerized workloads, and CI/CD pipelines.

- Design secure network security architectures, including segmentation, micro-segmentation, firewalls, WAFs, VPNs, IDS/IPS, and cloud-native security controls.

- Establish and maintain Infrastructure Security Controls for cloud, virtualization, operating systems,



and network platforms.

- Perform security architecture reviews, threat modeling, risk assessments, and security design validations.

- Collaborate with engineering, DevOps, cloud operations, and compliance teams to ensure secure solution delivery.

- Evaluate emerging technologies and recommend security enhancements aligned with business objectives.

- Support compliance initiatives related to ISO 27001, NIST, CIS Controls, SOC 2, and other relevant frameworks

- 8 to 12 years of overall experience in Information Security, Cybersecurity, or Security Architecture.

- Minimum 4+ years of hands-on experience in Cloud Security Architecture.

- Strong expertise in Cryptography, PKI, TLS/SSL, encryption standards, and key management solutions.

- Deep understanding of Cloud Security concepts and cloud-native security services.

- Extensive experience with Identity & Access Management (IAM) technologies and access governance.

- Practical implementation experience with Zero Trust Architecture frameworks and controls.

- Robust experience in Kubernetes Security, Container Security, and DevSecOps practices.

- Expertise in Network Security Architecture, including cloud and on-premise network security controls.

- Knowledge of Infrastructure as Code (Terraform, CloudFormation, ARM Templates) security best practices.

- Experience with SIEM, CSPM, CNAPP, EDR/XDR, vulnerability management, and security monitoring solutions.

- Understanding of security frameworks such as NIST, CIS, MITRE ATT&CK;, and Zero Trust models.

📌 Information Security Architect (Pune)
🏢 Candent
📍 Pune