Security Architect – Microsoft

Job description

**Role:** Security Architect – Microsoft **Location:** Bangalore, Hybrid Work From Office **Experience:** 8–15+ years in IT security, architecture, or cloud security **Role Overvi** ewA Security Architect at Microsoft is responsible for designing, implementing, and governing secure architectures across cloud platforms (primarily Azure), enterprise systems, and applications. This role ensures alignment with Microsoft’s security standards, Zero Trust principles, and compliance frameworks while enabling secure innovatio **n. Key Responsibilit** **iesSecurity Architecture & Des** - ignDesign secure cloud and hybrid architectures using Microsoft Azure Security servi - cesApply Zero Trust principles across identity, network, endpoints, and applicati - onsDefine security reference architectures, patterns, and best practi **cesThreat Modeling & Risk Managem** - entConduct threat modeling (STRIDE, MITRE ATT& - CK)Identify vulnerabilities and recommend mitigati - onsPerform risk assessments and security reviews for enterprise soluti **onsCloud Security (Azure Foc** - us)Implement and gove - rn:Azure Security Center / Defender for Cl - oudAzure Sentinel (SIEM/SO - AR)Azure AD (Entra ID) security contr - olsKey Vault, RBAC, Conditional Acc **essIdentity & Access Managem** - entArchitect secure IAM solutions usi - ng:Azure AD / Entra - IDPrivileged Identity Management (P - IM)Multi-factor authentication (M - FA)Single Sign-On (S **SO)Security Governance & Complia** - nceEnsure compliance with standar - ds:ISO 27001, NIST, SOC 2, G - DPRDefine and enforce security policies, controls, and framewo **rksIncident Readin** - essSupport incident response planning and rev - iewBuild resilient architectures for detection and respo **nse Required Skills & Qualificat** **ions Educa** tion: Bachelor’s/master’s in computer science, Cybersecurity, or related f **ield Experi** - ence8–15+ years in IT security, architecture, or cloud secu - rityProven experience in enterprise/cloud security de **sign Technical S** **killsCore Security S** - killsNetwork security (Firewalls, WAF, VPN, Zero T - rust)Application security (OWASP To - p 10)Data security & encry **ptionCloud Security (Crit** - ical)Azure (mandatory for Microsoft r - oles)Knowledge of AWS/GCP (optional but benefi **cial)Tools & Technol** - ogiesSIEM tools (Azure Sentinel, Sp - lunk)Identity systems (Azur - e AD)DevSecOps tools (GitHub Advanced Security, CI/CD secu **rity) Preferred Certific** - ationsMicrosoft Certifica - tions:SC-100 (Cybersecurity Architect E - xpert)AZ-500 (Azure Security Eng - ineer)CISSP / CISM - / CCSPTOGAF (architecture fram ework)