Senior Security Architect

About the role

The Sr. Principal Information Security Architect is a strategic technical leader responsible for defining and driving enterprise security architecture across multi‑cloud environments including Google Cloud Platform, Microsoft Azure, and Amazon Web Services. The role partners with the CISO and senior leadership to modernize security capabilities, enforce architectural standards, and enable secure digital transformation.

Key responsibilities

• Lead enterprise security architecture strategy across GCP, Azure, and AWS.
• Define cloud security reference architectures, guardrails, and landing zones.
• Drive Zero Trust architecture adoption across hybrid and multi‑cloud environments.
• Establish and enforce security patterns for IAM, network security, data protection, and workload security.
• Provide architectural oversight for cloud‑native and hybrid applications.
• Integrate security into DevSecOps pipelines and CI/CD frameworks.
• Conduct threat modeling and risk assessments for cloud platforms.
• Advise on compliance alignment with ISO 27001, SOC 2, HIPAA, FedRAMP, CMMC.
• Mentor architects and engineers on cloud security best practices.

Required profile

• 10+ years of experience in security architecture and engineering.
• 5+ years of experience in cloud security architecture (GCP, Azure, AWS).
• Four‑year degree in computer science, software or security engineering or a related field.
• Preferred certifications such as CSSLP, CSDP, CEH, CISSP, CCSP, OSCP, OSWE, GPEN, GXPN.
• Strong knowledge of multi‑cloud security frameworks.

Required skills

• Google Cloud Platform (Organization policies, VPC Service Controls, IAM Conditions, Binary Authorization, SCC).
• Microsoft Azure (Azure AD, Defender for Cloud, Private Link, Policy, Landing Zones).
• Amazon Web Services (IAM, Organizations, Control Tower, GuardDuty, Security Hub, VPC design).
• Identity & Access Management (federation, PAM, least‑privilege).
• Cloud network security (segmentation, private connectivity, service endpoints).
• Data security (encryption, key management, DLP).
• Security monitoring and detection engineering.
• Infrastructure as Code – Terraform (preferred).