Key Responsibilities:

• Lead end-to-end security design and architecture reviews for common cloud platforms (AWS, Azure, GCP) and major SaaS applications
  
• Develop and maintain secure-by-design reference architectures, patterns, and guidelines tailored to IaaS, PaaS, and SaaS deployments
  
• Perform threat modeling, risk assessments, and gap analyses to align solutions with internal security standards and regulatory requirements
  
• Define identity and access control strategies, including SSO, MFA, PKI, and least-privilege models
  
• Design various network and infrastructure security controls: e.g. network segmentation, security groups, firewalls, SASE, IPS/IDS
  
• Architect data protection solutions: encryption key management, Transparent Data Encryption, tokenization, DLP for cloud and SaaS data
  
• Integrate application and infrastructure logs into SIEM platforms (Splunk Cloud, Azure Sentinel) and design SOAR playbooks for automated response
  
• Collaborate with DevOps and engineering teams to embed security requirements in CI/CD pipelines, leveraging IaC tools
  
• Facilitate design workshops, governance gates, and architecture review boards; document decisions and action items
  
• Mentor junior architects and security engineers, sharing best practices and driving continuous improvement
  

General Skills:

• Proven leadership in technical security architecture for enterprise environments
  
• Deep expertise across cloud service providers (AWS, Azure, GCP) and SaaS ecosystems
  
• Strong grounding in application architecture, networking, and security operations
  
• Proficiency in structured design methodologies and ITIL service-management practices
  
• Ability to translate complex business requirements into actionable security solutions
  
• Experience creating conceptual, logical, and physical process/data models
  
• Track record of developing, recommending, and governing security architecture
  
• Awareness of emerging technologies, industry trends, and security best practices
  
• Excellent analytical, problem-solving, decision-making, and interpersonal skills
  
• Clear verbal and written communication; skilled at presenting to technical and executive audiences
  
• Collaborative team player with a consistent record of meeting deadlines
  

Experience and Skill Set Requirements:

Must Haves:

• Security arch and design with Cloud Platforms -(AWS, Azure)
  
• Client Relationship Building skills.
  

Skill Set Requirements:

Core Security Technology Domains:

• Identity & Access Management: SSO, MFA, PKI, identity federation (OAuth/OIDC, SAML)
  
• Infrastructure & Network Security: VCN/VNet/subnet design, firewalls, security groups, micro-segmentation, SASE patterns
  
• Data Protection: KMS/Vault key management, TDE, tokenization, DLP, data classification and discovery
  
• Application Security: Secure SDLC, container and serverless hardening, API gateway policies, WAF integration
  
• Security Operations & Visibility: SIEM ingestion pipelines, correlation searches, dashboards, SOAR automation, EDR tools
  

Agile Project Delivery:

• Hands-on experience in Agile/Scrum environments: backlog management, user-story creation, sprint planning, retrospectives
  
• Embed security requirements and automated testing into CI/CD pipelines
  
• Facilitate cross-functional workshops (threat modeling, design sprints) to align SecOps, DevOps, and architecture teams
  

Architecture & Design Expertise:

• Apply frameworks (TOGAF, NIST CSF, CIS Controls) to cloud and SaaS solutions
  
• Lead requirements gathering, conceptual, logical, and detailed design phases
  
• Provide engineering implementation support: IaC (Terraform, CloudFormation), configuration templates, logging-agent deployments
  
• Guide peers through design reviews, governance gates, and operational handovers
  

Public Sector & Regulatory Awareness:

• Previous public-sector or regulated-industry experience is a plus
  
• Familiarity with mandates and standards (FIPPA, PHIPA, PCI DSS, AODA, ISO 27001)
  
• Embed audit trails, retention policies, and compliance checks into design artifacts