Job highlights

- 9-12 years experience in Azure cloud security architecture with expertise in Azure networking, Azure Firewall, NSGs, Microsoft Entra ID, PAM, and Zero Trust principles
- Design and implement secure Azure and hybrid cloud architectures, enforce network segmentation, strengthen identity security, manage privileged access, and conduct security risk assessments

Position: Lead Analyst

Experience: 9 12 Years

Category: Infrastructure

Shift: Timing/rotation etc. details

Main location: Bangalore

Position ID: J1026-1439

Employment Type: Full Time

Education Qualification: Bachelors degree in computer science or related field or higher with minimum 3 years of relevant experience.

: Azure Cloud Security Architect

Job Summary

Looking for an experienced Azure Cloud Security Architect to design and implement secure Azure and hybrid infrastructure architectures aligned with Zero Trust and Secure by Design principles. The role focuses on network segmentation, internal traffic control, identity security, privileged access, infrastructure isolation, and enterprise security risk reduction.

Key Responsibilities

. Design and implement secure Azure and hybrid cloud architectures using VNets, subnets, NSGs, Azure Firewall, routing, Private Endpoints, and hybrid connectivity.

. Implement network segmentation, east west traffic inspection, microsegmentation, workstation to workstation restrictions, and controls to prevent unauthorized lateral movement.

. Define and enforce security zones across user, server, management, backup and recovery, virtualization, and privileged administration environments.

. Strengthen identity security through Microsoft Entra ID, Active Directory Tier 0 isolation, RBAC, PIM, Conditional Access, MFA, and administrative segregation.

.



Design secure privileged administration using PAM, jump hosts, Privileged Administrative Workstations (PAWs), and controlled management plane access.

. Implement isolation and security controls for backup and recovery environments, hypervisors, and vCenter infrastructure.

. Establish cloud security governance using Azure Policy and Microsoft Defender for Cloud, with appropriate security monitoring and logging.

. Develop a security architecture roadmap covering network segmentation, identity security, PAM, infrastructure isolation, and cloud security improvements.

. Conduct security architecture assessments, identify risks, document mitigation measures and residual risks, and track remediation initiatives.

Required Skills

. 1012 years of relevant experience in Azure cloud architecture, infrastructure security, or hybrid cloud security.

. Strong hands on expertise in Azure networking, Azure Firewall, NSGs, routing, Private Endpoints, and hybrid connectivity.

. Practical experience in network segmentation, east west traffic control, and lateral movement prevention.

. Robust knowledge of Microsoft Entra ID, Active Directory security, Tier 0 isolation, RBAC, PIM, and privileged access controls.

. Experience with PAM, jump host architecture, PAWs, backup network segregation, and virtualization security.

. Expertise in Zero Trust architecture, cloud security governance, security risk assessment, and architecture documentation.

Skills:

- Azure Cloud
- Security for Azure
- Azure
- Cloud Security Audit
- Network Architecture

What you can expect from us: That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

📌 LA- Azure Cloud Security Architect (Bengaluru)
🏢 CGI
📍 Bengaluru