Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Network Security Operations
Good to have skills : Zscaler Architecture
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

"Summary: As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to document the implementation of cloud security controls and facilitate the transition to cloud security-managed operations, ensuring that all security measures align with organizational objectives and compliance standards. You will engage in discussions to refine security strategies and provide guidance on best practices, contributing to a secure and efficient cloud environment. Roles & Responsibilities: - Expected to be an SME. - Collaborate and manage the team to perform. - Responsible for team decisions. - Engage with multiple teams and contribute on key decisions. - Provide solutions to problems for their immediate team and across multiple teams. - Develop and maintain comprehensive documentation of security policies and procedures. - Conduct regular security assessments and audits to identify vulnerabilities and recommend improvements. - Lead knowledge sharing through KT and transition processes for smooth handovers. - Manage cross-skilled team members and enforce process adherence. - Create and update SOPs; drive active involvement in P1/P2 incident support. - Coordinate daily, weekly, and monthly calls with clients and internal teams. - Track and maintain KPIs and SLAs as per service contracts. - Lead incident response investigations and breach mitigation efforts. - Manage vendor relationships, budgets, and evaluate cybersecurity tools. - Lead the deployment, configuration, and administration of Cisco ASA, Firepower, Palo Alto, and FortiGate firewall solutions. - Manage rule base reviews, policy tuning, access control, and threat prevention on firewall platforms. - Oversee Zscaler Internet Access (ZIA), including authentication (SAML/SCI), policy enforcement, user access troubleshooting, and traffic monitoring. - Configure and support Cloudflare security services (DNS, Zero Trust Access, DDoS Protection, Secure Web Gateway). - Implement and administer Cisco ISE (NAC) policies for device authentication, endpoint compliance, and network segmentation. - Monitor, detect, and investigate security events through SIEM and SOC processes, escalating and resolving incidents within defined SLAs. - Maintain and update runbooks, operational procedures, and knowledge base articles for Firewall, Zscaler, Cloudflare, and NAC security technologies. - Provide L2/L3 support for P1/P2 incidents and perform root cause analysis to identify recurring issues. - Contribute to security projects, audits, and compliance reviews, ensuring configurations align with security baselines and frameworks. Professional & Technical Skills: - Must To Have Skills: Proficiency in Network Security Operations. - Good To Have Skills: Experience with Zscaler Architecture. - Strong understanding of cloud security principles and frameworks. - Experience with security incident response and management. - Familiarity with compliance standards such as ISO 27001, NIST, and GDPR. - Cisco ASA, Firepower, FortiGate, and Palo Alto firewall management (policy configuration, failover, NAT, VPN). - Zscaler ZIA policy setup, troubleshooting user issues, and traffic log analysis. - Cloudflare Zero Trust services (WAF, Secure Gateway, DNS Security). - Cisco ISE (NAC) for endpoint access control, posture validation, and profiling. - In-depth understanding of network security protocols (TCP/IP, SSL/TLS, IPsec, GRE, BGP, DNS). - Familiarity with ITSM and ServiceNow platforms for incident and service management. - Strong troubleshooting skills across network, firewall, and cloud-based environments. - Excellent communication, stakeholder management, and documentation skills. Additional Information: - The candidate should have minimum 7.5 years of experience in Network Security Operations. - This position is based at our Bengaluru office. - A 15 years full time education is required. - Cisco certifications such as CCNP Security, PCNSE (Palo Alto), or NSE4+. - Zscaler Certified Professional (ZCP) or Cloudflare certification. - Experience with additional firewall platforms (Check Point, Fortinet, Palo Alto). - Experience in network security operations, incident response, and automation workflows. - Prior involvement in Firewall migrations, Zscaler rollouts, or NAC transformation projects. "