Information Security Architect

We are looking for a highly skilled Principal Information Security Engineer to lead the design, deployment, and enhancement of enterprise security solutions. The ideal candidate will possess extensive hands-on experience with Microsoft Security technologies, SIEM engineering, Data Loss Prevention (DLP), endpoint and cloud security, vulnerability management, and DevSecOps. This role requires a strategic thinker who can strengthen the organization’s security architecture and safeguard critical information assets across diverse environments.

Key Responsibilities

- Design, implement, and continuously optimize enterprise information security solutions and technical controls to protect organizational assets.
- Deploy and manage SIEM platforms such as IBM QRadar and Microsoft Sentinel, focusing on log integration, detection engineering, analytics, and automation.
- Implement and administer Microsoft Security solutions, including Defender XDR, Microsoft Intune, Microsoft Purview, and Microsoft Entra ID.
- Lead the Data Loss Prevention (DLP) strategy, encompassing solution deployment, data classification, policy development, incident investigation, and compliance reporting.
- Manage privileged access, secure access frameworks, endpoint protection, and application security controls to reduce risk exposure.
- Enhance cloud security posture across Microsoft Azure and AWS platforms through effective controls and monitoring.
- Conduct comprehensive vulnerability assessments, security reviews, risk evaluations, and develop remediation plans.
- Integrate security controls within CI/CD pipelines, promoting secure software development lifecycle (SDLC) and DevSecOps best practices.
- Perform security architecture reviews, infrastructure hardening, and technical risk assessments to ensure robust defenses.
- Lead cross-functional security initiatives, collaborating closely with Infrastructure, Cloud, Development, Compliance, and Business teams.
- Support information security audits, regulatory compliance efforts, vendor risk assessments, and drive continuous security improvements.

Required Qualifications

- Bachelor’s or Master’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
- 8 to 12+ years of relevant experience in Information Security Engineering, Cybersecurity, or Security Architecture roles.
- Proven track record in implementing and managing enterprise-wide security solutions.
- Strong expertise in SIEM platforms (IBM QRadar, Microsoft Sentinel), Microsoft Security stack (Defender XDR, Intune, Purview, Entra ID), and DLP technologies.
- Deep understanding of privileged access management, identity and access security, network and application security, and cloud security (Azure and AWS).
- Experience with vulnerability management, penetration testing (VAPT), DevSecOps, and secure SDLC practices.
- Excellent technical leadership, analytical thinking, problem-solving skills, and ability to manage multiple stakeholders effectively.

Preferred Qualifications and Benefits

Hands-on experience with one or more of the following enterprise security platforms is highly desirable: CyberArk PAM, Zscaler ZIA/ZPA, Imperva WAF, Fortinet, and Forescout.

Preferred certifications include CISSP, CISM, CEH, CHFI, Microsoft Security/Azure certifications, ISO 27001 Lead Implementer or Lead Auditor, and Forcepoint DLP or other relevant vendor certifications.

This role offers the opportunity to work at the forefront of enterprise security, leading critical initiatives that protect vital information assets and shape the organization’s security posture. Candidates with a passion for innovation and continuous improvement in cybersecurity will find this position rewarding and impactful.