Cloud Security Architect at ELITS designing secure cloud environments and managing cloud security policies for business objectives and compliance requirements.
Responsibilities
Cloud Security Architecture - Design and implement secure cloud infrastructures using Microsoft Azure and Microsoft 365 services, ensuring they meet security, compliance, and business requirements.
Identity and Access Management - Architect and manage secure Azure Active Directory (AAD) solutions, including multi-factor authentication (MFA), conditional access, and identity protection policies to secure user identities and access.
Cloud Security Best Practices - Leverage Azure Security Center, Microsoft Defender, and other tools to establish best practices for securing cloud environments, including vulnerability management, threat detection, and incident response.
Compliance & Governance: Ensure that all cloud architectures comply with industry regulations and internal security policies, including frameworks like GDPR, ISO 27001, SOC 2, HIPAA, and more. Auditing for compliance.
Risk Management: Identify potential security risks in cloud services and design mitigation strategies. Collaborate with risk management teams to assess threats, vulnerabilities, and implement corrective actions.
Cloud Security Tools, Automation, Scripting, and Reporting: Implement cloud security tools such as Azure Sentinel, Microsoft Defender for Identity, and Cloud App Security to monitor and automate threat detection and response. Develop automation solutions using tools such as PowerShell and Azure CLI, or Power BI to streamline cloud resource deployment and management.
Encryption & Secure Data Practices: Ensure the encryption of data at rest and in transit across all cloud environments. Establish secure data storage practices and advocate for zero-trust models within cloud services.
Collaboration & Consultation - Work closely with internal stakeholders, external clients, and vendors to ensure cloud environments are designed with a focus on security and meet business objectives.
Security Incident Response: Provide leadership in identifying, responding to, and remediating security incidents or vulnerabilities within cloud services.
Vulnerability Management: Participation in day-to-day vulnerability management activities and keep improving vulnerability management process.
Security Awareness & Training: Educate teams on cloud security best practices, DLP policies, and compliance requirements, fostering a culture of security awareness across the organization.
Business Continuity Management: Define and agree, together with stakeholders, the BCM process and plans, disaster recovery plans and metrics and goals.
Requirements
Bachelor's Degree or higher in Computer Science or equivalent
5+ years of prior work experience experience in cloud architecture or solution design with a focus on Microsoft Azure and Microsoft 365 security
Proven expertise in cloud security best practices, with strong knowledge of Azure Security Center, Microsoft Defender, and other security tools.
Hands-on experience with Azure Active Directory (AAD)/Entra ID, Conditional Access, Identity Protection, and security policies.
In-depth knowledge of Data Loss Prevention (DLP) strategies and tools within Microsoft 365 and Azure.
Understanding of compliance frameworks and regulatory requirements (e.g., GDPR, SOC 2, ISO 27001, HIPAA).
Strong background in encryption, identity and access management (IAM), and security monitoring tools such as Azure Sentinel, Cloud App Security, Microsoft Defender for Identity, and CrowdStrike Falcon and CS dashboard.
Experience implementing security features such as Zero Trust architecture, threat detection, and vulnerability management.
Familiarity with PowerShell scripting, Azure CLI, and other automation tools for managing cloud resources securely.
Knowledge of Azure Firewall, Azure Front Door, Web Application Firewall (WAF), and other Azure security solutions.
Experience in developing or maintaining security operations centers (SOC) or managing security incident response processes.
Strong analytical and problem-solving skills, with the ability to identify and address security vulnerabilities.
Security Engineer at PAMP Technologies responsible for global security management and incident response. Collaborating with teams in Bangalore and worldwide to bolster security infrastructure.
(Senior) Information Security Advisor leading global cybersecurity strategy for Knauf, a building materials manufacturer. Responsibilities include guiding IT and business on security regulations and risk management.
Information Security Governance Manager at Knauf leading global information security governance. Focused on shaping policies, frameworks, and optimising ISMS while ensuring stakeholder engagement.
Cyber Security Incident Commander leading end - to - end response to cybersecurity incidents at Knauf IT, a global building materials manufacturer with a commitment to digital transformation.
AI Security Principal at HITRUST addressing AI security risks and responsible practices. Collaborating across teams to influence AI security assurance and governance.
Cloud Governance & Security Engineer at Zinkworks responsible for cloud operations, governance, and compliance - related projects. Focused on improving security controls and implementing IT initiatives.
Engage in security incident detection and analysis at Telefónica Tech. Responsible for managing cybersecurity incidents and maintaining security documentation.
Senior Security Engineer designing and improving security controls within Enpal's IT environment. Collaborating closely with IT and enhancing security posture in a renewable energy company.
Senior Network Security Engineer responsible for evaluating security solutions and technologies at Absa. Collaborating with Risk, Cyber, and Architecture teams for effective security management.
Security Specialist contributing to personal security within SEB's operations. Coordinating, developing, and advising on personal security measures for employees and stakeholders in various locations.