Security Architect - Threat Modeling

Role : Security Architect Microsoft.

Location : Bangalore, Hybrid Work From Office.

Experience : 8 to 15+ years in IT security, architecture, or cloud security.

Role Overview :

A Security Architect at Microsoft is responsible for designing, implementing, and governing secure architectures across cloud platforms (primarily Azure), enterprise systems, and applications. This role ensures alignment with Microsofts security standards, Zero Trust principles, and compliance frameworks while enabling secure innovation.

Key Responsibilities :

1. Security Architecture & Design :

- Design secure cloud and hybrid architectures using Microsoft Azure Security services.

- Apply Zero Trust principles across identity, network, endpoints, and applications.

- Define security reference architectures, patterns, and best practices.

2. Threat Modeling & Risk Management :

- Conduct threat modeling (STRIDE, MITRE ATT&CK).

- Identify vulnerabilities and recommend mitigations.

- Perform risk assessments and security reviews for enterprise solutions.

3. Cloud Security (Azure Focus) :

- Implement and govern : Azure Security Center / Defender for Cloud.

- Azure Sentinel (SIEM/SOAR).

- Azure AD (Entra ID) security controls.

- Key Vault, RBAC, Conditional Access.

4. Identity & Access Management :

- Architect secure IAM solutions using : Azure AD / Entra ID.

- Privileged Identity Management (PIM).

- Multi-factor authentication (MFA).

- Single Sign-On (SSO).

5. Security Governance & Compliance :

- Ensure compliance with standards : ISO 27001, NIST, SOC 2, GDPR.

- Define and enforce security policies, controls, and frameworks.

6. Incident Readiness :

- Support incident response planning and review.

- Build resilient architectures for detection and response.

Required Skills & Qualifications :

Education : Bachelors/masters in computer science, Cybersecurity, or related field.

Experience : 8 to 15+ years in IT security, architecture, or cloud security. Proven experience in enterprise/cloud security design.

Technical Skills :

1. Core Security Skills :

- Network security (Firewalls, WAF, VPN, Zero Trust).

- Application security (OWASP Top 10).

- Data security & encryption.

2. Cloud Security (Critical) :

- Azure (mandatory for Microsoft roles).

- Knowledge of AWS/GCP (optional but beneficial).

3. Tools & Technologies :

- SIEM tools (Azure Sentinel, Splunk).

- Identity systems (Azure AD).

- DevSecOps tools (GitHub Advanced Security, CI/CD security).

Preferred Certifications :

- Microsoft Certifications : SC-100 (Cybersecurity Architect Expert), AZ-500 (Azure Security Engineer).

- CISSP / CISM / CCSP.

- TOGAF (architecture framework).