Cyber Security Architect

About the job :

- 12+ years of overall experience in Cybersecurity, develop and maintain end-to-end security architectures based on Zero Trust, SASE, SSE, and well-architected cloud frameworks.

- Strong background in networking and security architecture in pre-sales, consulting, or professional services roles.

- Design and implement cloud and on-prem security controls including identity, network, application, workload, data, and edge security.

- Demonstrated experience leading technical architecture discussions with senior stakeholders, CISOs, Enterprise Security Architects, and cloud infrastructure leaders.

- Build and maintain security control frameworks ensuring effective detection, response, compliance, and hardening of enterprise environments.

- Proven ability to design security reference architectures for cloud-only and hybrid enterprise environments, at scale.

- Evaluate, integrate, and optimize Zero Trust platforms (e.g., ZTNA, SWG, CASB, DLP, EDR/XDR, CSPM, CIEM).

- Conduct gap assessments, provide remediation plans, and drive continuous improvement in security posture.

- Guide enterprises in adopting Zero Trust network architecture and modern segmentation methodologies.

Enterprise Security Standards :

- ISO 27001, NIST, CIS Benchmarks, PCI DSS, SOX, OWASP

- Ability to map architecture and controls to compliance requirements.

- Create high-quality HLDs, LLDs, Visio diagrams, and executive-ready presentations.

- Stay updated with modern threat frameworks such as MITRE ATT&CK, NIST CSF, CIS Controls, and emerging cloud security trends.

Technical Skills :

- Expertise in securing cloud services in multi-cloud environments and driving activities like integration with 3rd party monitoring tools, encryption tools and security best practices etc.

- Prior experience with enterprise security solutions such as Firewalls, WAF, IPS, Anti-DDOS, endpoint security, SIEM, (IDS/IPS), NAC/ISE, vulnerability management, email Security, PAM, EDR, Web proxy products.

- Demonstrate deep knowledge of networking and security architecture and ability to engage in technical discussions with networking and security architects of large enterprises.

Practical Understanding :

- ZTNA, SWG, CASB, CSPM, CIEM, DLP, EDR/XDR, VPN replacement technologies

Experience Designing Zero Trust Architectures Using Platforms Like :

- Zscaler (ZIA/ZPA/ZDX)

- Netskope (NG-SWG, CASB, ZTNA, DLP)

- Palo Alto (Prisma Access, Strata, Cortex)

- Other next-gen Zero Trust/SASE platforms

- Must have experience with web technologies including HTTP, HTTPS, SSL/TLS, VPNs, Firewall, Proxy, IDS/IPS.

- Must have experience, knowledge and be able to demonstrate in-depth knowledge of frameworks like : ZTNA, SASE and SSE.

- Have good experience creating design documents (HLD, LLD) diagrams (Visio) and presentations (PPT).

- Familiarity with compliance & security standards across the enterprise IT landscape.

- Knowledge of compliances (PCI DSS, SOX etc.) and IS standards (ISO 27001, BS25999, ISO 2700X, OWASP, CIS, etc).