Information Security Architect

Senior Network Security Engineer (Microsegmentation) 

Key Responsibilities 

• Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. 
• Develop and support comprehensive solutions that meet requirements and align with HPE’s global network security and microsegmentation strategy. 
• Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models. 
• Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. 

Microsegmentation & Zero Trust Responsibilities 

• Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. 
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. 
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation. 
• Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. 
• Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. 
• Lead adoption of microsegmentation platforms (e.g, Guardicore/Akamai Segmentation). 
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). 

Core Network Security Responsibilities 

• Participate in network security design reviews and ensure all implementations meet enterprise security standards. 
• Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments. 
• Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting. 
• Conduct and support internal and external security audits and compliance assessments. 
• Maintain awareness of emerging threats and update policies accordingly. 
• Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. 
• Manage and optimize Security Information and Event Management (SIEM) systems. 
• Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. 

Technical Qualifications 

• 10+ years of experience in enterprise network security architecture, engineering, and operations. 

Microsegmentation & Advanced Security 

• Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. 
• Proven capability to build application-aware segmentation policies based on traffic flow analysis. 
• Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. 
• Understanding of east-west traffic inspection, workload protection, and software-defined segmentation. 
• Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. 

Network Security & Infrastructure 

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. 
• Expertise in firewall architecture and design with hands-on experience in:  
• Fortinet (Fortigate), Palo Alto, Juniper 
• Policy design, NAT, routing, application control, and threat prevention profiles 
• Experience securing public and private cloud (AWS, Azure, GCP) environments. 
• Design and implementation of Web Application and API Protection (WAAP) solutions. 
• Strong experience in proxy (forward/reverse), load balancing, and application security integration. 
• Experience with SDN and SD-WAN architectures, including segmentation use cases. 

Networking & Protocol Expertise 

• Strong knowledge of:  
• Routing protocols: BGP, OSPF, RIP, MPLS 
• Network services: DNS, DHCP, NTP 
• IPv4/IPv6 architecture and traffic management 
• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants). 
• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions. 

Data Center & Infrastructure 

• Experience managing enterprise data center environments with technologies including:  
• Aruba, Arista, Juniper switching 
• Firewalls, WAN optimization, IDS/IPS, DLP 
• Strong understanding of structured cabling and network facilities. 

Operations & Lifecycle Management 

• Plan, implement, and document infrastructure changes, including upgrades and migrations. 
• Work within ITIL frameworks for incident, change, and problem management. 

Education & Certifications 

• Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience). 
• 10+ years of experience in global network security environments. 
• Preferred certifications:  
• CCNP / CCIE 
• JNCIE 
• Security certifications (CISSP, CISM, or equivalent) are a plus 

Key Differentiators Added (for your context) 

This version strengthens the JD by: 

• Embedding microsegmentation as a core capability (not just one bullet) 
• Aligning with Zero Trust and application dependency mapping (important for your programs) 
• Emphasizing cross-team collaboration with application owners (critical for rollout success) 
• Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing) 

Technical Architect

Experience:

10+ Years

Work Mode:

Onsite / Hybrid

Role Type:

Architecture + Hands-on Engineering + Technical Leadership

Role Overview

We are looking for an experienced and hands-on

Technical Architect

who can define enterprise-widearchitecture, technology strategy, and engineering standards across multiple products and platforms.

The Technical Architect will translate business requirements into scalable technical solutions, guideengineering teams, reduce technical risks, and remain actively involved in implementation when required.

This is

not a purely advisory or documentation-focused role

. The successful candidate should becomfortable contributing directly to production-quality code, prototypes, critical modules, technical fixes,and architectural Proofs of Concept (PoCs).

Key Responsibilities

Define enterprise architecture strategy, target architecture, and technology roadmaps acrossproducts and platforms.

Design scalable, secure, resilient, and maintainable software systems.

Architect cloud-native, distributed, microservices-based, and multi-tenant SaaS solutions.

Translate product and business requirements into architecture, technical designs, serviceboundaries, data models, and API contracts.

Establish architecture governance, coding standards, engineering best practices, and designprinciples.

Conduct architecture reviews, design reviews, code reviews, and technical risk assessments.

Identify scalability bottlenecks, security risks, performance issues, and technical debt.

Drive modernization initiatives and technology evaluations.

Guide technology selection and technical investment decisions.

Mentor Technical Leads, Senior Engineers, and other engineering team members.

Collaborate with Product, Engineering, QA, DevOps, Security, and business stakeholders.

Support technical estimation, solution feasibility, delivery planning, and architecture planning.

Hands-on Engineering Responsibilities

The Technical Architect must remain actively involved in engineering and should be capable of switchingbetween architecture and implementation depending on project requirements.

Responsibilities include:

Develop production-quality backend, frontend, or integration components when required.

•

•

•

•

•

•

•

•

•

•

•

•

•

1

Build technical prototypes, PoCs, reference implementations, and reusable frameworks.

Assist engineering teams with complex technical and production issues.

Perform root-cause analysis and technical troubleshooting.

Contribute to performance and scalability improvements.

Implement or guide security fixes and critical technical modules.

Review existing codebases and recommend improvements.

Drive refactoring and modernization initiatives.

Conduct code reviews and establish implementation patterns.

Pair with engineers when required to translate architectural decisions into working software.

Remain comfortable moving between architecture, design, coding, reviews, and troubleshooting.

Core Technical Skills

Programming

JavaScript

TypeScript

Python

Go / Golang

Java

Spring Boot

Architecture & System Design

Microservices Architecture

Distributed Systems

Multi-Tenant SaaS

Domain-Driven Design (DDD)

Service-Oriented Architecture (SOA)

API-First Architecture

Cloud-Native Architecture

Enterprise Application Architecture

Backend Engineering

Node.js

Express.js

REST APIs / Enterprise APIs

Identity Management

Authentication & Authorization

Messaging

Integration Architecture

Database & Data

MongoDB

Redis

Data Modeling

2

Query Optimization

Performance Optimization

Frontend & Mobile

React.js

React Native

Cloud & DevOps

AWS

Docker

Kubernetes

CI/CD

Containerized Applications

Cloud-Native Deployments

Security

Secure Software Development Lifecycle (SSDLC)

API Security

Encryption

Security Governance

Authentication & Authorization

AI & Emerging Technologies

LangChain

Gemini

Retrieval-Augmented Generation (RAG)

AI Agents

OCR

Enterprise Integrations

Enterprise APIs

Payment Gateways

WhatsApp Business Integration

Third-Party System Integrations

These technologies and architecture areas are specified as the core technical expertise for the position.

Product & Engineering Expectations

The ideal candidate should have:

Strong experience building production-grade software products, not only isolated applications or

PoCs.

3

Ability to balance ideal architecture with business timelines, budget, maintainability, and

engineering-team capabilities.

Experience working in evolving product environments with changing requirements and multiple

parallel initiatives.

Strong ability to evaluate technology options and explain technical trade-offs.

Ownership mindset with the ability to proactively identify and resolve technical problems.

Strong understanding of reliability, security, observability, performance, scalability, and

maintainability.

Ability to take architectural decisions from initial design through successful production

implementation.

Technical Leadership & Collaboration

Mentor Technical Leads and Senior Engineers.

Establish and promote a strong engineering culture.

Define clear technical direction and engineering standards.

Lead architecture, design, and code reviews.

Participate in technical hiring and evaluation of senior engineering candidates.

Help establish technical interview and engineering assessment standards.

Evaluate architecture, coding, system design, and problem-solving capabilities.

Communicate architecture decisions, technical risks, dependencies, and delivery implications to

leadership.

Promote effective documentation of architecture decisions, APIs, dependencies, and operational

considerations.

Preferred Experience

Experience in one or more of the following areas will be preferred:

FinTech

SaaS Products

AI Platforms

Cloud-Native Applications

Enterprise-Scale Distributed Systems

Nice to Have

Kafka

GraphQL

Serverless Architecture

Machine Learning Platforms

Multi-Cloud Architecture

Ideal Candidate Profile

The ideal candidate is a senior engineer and architect capable of operating at both strategic and

implementation levels.

About the Role

We are looking for a Solution Architect with 10–15 years of experience to design scalable, secure, and cloud-ready solutions. The role involves working with customers, Senior Solution Architects, business analysts, project managers, and engineering teams across cloud, modernization, microservices, integration, and digital transformation initiatives.

Must Have Skills

• 10–15 years of experience in software development, architecture, and enterprise application delivery.
• Strong experience with Azure and/or AWS and cloud-native architecture.
• Hands-on experience with Microservices, REST APIs, SOA, and system integration.
• Experience in application modernization and cloud migration.
• Knowledge of Docker, Kubernetes, CI/CD, and Infrastructure as Code.
• Understanding of cloud security, IAM, networking, monitoring, and disaster recovery.
• Ability to create architecture diagrams, solution designs, and technical documentation.
• Strong analytical, communication, and customer-facing skills.

Good To Have Skills

• AWS/Azure certifications.
• Experience with Serverless, Event-Driven Architecture, Messaging, and API Management.
• Exposure to SaaS / Multi-Tenant Architecture.
• Knowledge of Generative AI and AI-enabled solutions.
• Experience with pre-sales, POCs, estimations, and technical proposals.
• Exposure to application security and compliance.
• Experience working with global customers and distributed teams.

Responsibilities

• Design end-to-end solutions and independently own defined architecture workstreams.
• Translate business and technical requirements into application, cloud, integration, and deployment designs.
• Define microservice, API, integration, and data-flow architectures.
• Guide engineering teams on architecture implementation and conduct design/code reviews.
• Contribute to cloud migration, modernization, and digital transformation initiatives.
• Participate in customer workshops, technical discussions, POCs, and solution demonstrations.
• Identify and address architectural, performance, security, and technical risks.
• Ensure solutions follow defined architecture, security, and engineering standards.
• Work closely with the Senior Solution Architect on complex and strategic engagements.
• Develop reusable architecture patterns, templates, and technical accelerators

Next

Key Responsibilities

·       System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.

·       Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.

·       Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.

·       Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.

·       Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.

Required Qualifications

·       Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.

·       Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.

·       Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.

·       Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.

·       Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).

Preferred Skills

·        Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.

·        Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.

Job Title: Chief Manager – IT Infrastructure & Security

Location: Gurgaon

Experience: 12+ year in same

Qualification: B.Tech/MCA

Preferred Certifications: Palo Alto PCCSE, CyberArk, Nutanix NCP, VMware VCP, CCNP.

Must have exp in Server, network, firewall, edr, virtualization system (vm-ware, dutanix)

Technical Experience Required:

• AWS (Amazon Web Services) and/or Microsoft Azure
• VMware ESX / ESXi
• Windows Server
• Active Directory (AD)
• Kaseya
• DNS & DHCP
• Forcepoint / Websense
• Kaspersky AV
• Cisco networking
• SAN (Storage Area Network)
• Core Networking Tech: VoIP (Voice over IP), VPN (Virtual Private Network), TCP/IP, WAN/LAN/WLAN routing, and switching protocols.

Key Deliverables

Infrastructure Architecture & Operations

• Own the scoping, architecture and design of new infrastructure that will support the business.
• Administer HP Infrastructure, Nutanix HCI, Dell VxRail, VMware, Windows and Linux environments.
• Architect, monitor and maintain Active Directory services, File Services, Server Infrastructure and WAN/LAN/WLAN supporting business-critical systems.
• Be responsible for server, storage, network, security and monitoring hardware, software and services, ensuring they are optimised for availability, stability, integrity, performance and scalability.
• Forecast demand for storage, computing and network capacity, and take appropriate action before capacity limits are reached.
• Maintain IT hardware and software — including servers, peripherals, network nodes, terminals and wiring — manage equipment inventory and the hardware life cycle.

Network & End-User Computing

• Manage LAN/WAN, VPN, Cisco routing/switching and Cisco Meraki WiFi environments.
• Troubleshoot and quickly resolve network issues.
• Oversee end-user computing — laptops, desktops, printers, AV devices, iOS devices/iPad, MDM and endpoint management — and end-user support operations across Head Office, Stores and Warehouse. Security, Identity & Compliance
• Manage Palo Alto firewalls, SentinelOne EDR/XDR, CyberArk PAM, GTB DLP and Forcepoint/ForceScout security platforms.
• Perform regular security monitoring to identify any possible intrusions.
• Manage certificate/PKI and domain/DNS services, including issuance, renewal, rotation and revocation.
• Establish and maintain corporate IT infrastructure standards for configuration and security.
• Ensure IT governance, audit and compliance requirements are met.

Continuity, Backup & Performance

• Define, implement, test and maintain data back-up and recovery protocols to ensure availability.
• Drive business continuity, backup, disaster recovery and infrastructure modernisation projects.
• Be accountable for measuring and optimising application and infrastructure performance, and lead recovery actions after system failures.
• Monitor and maintain infrastructure stability against defined KPIs.

Leadership, Vendor & Governance

• Provide support to, manage and train the IT Infrastructure team.
• Manage vendor relationships, budgets, SLAs and team performance.
• Project-plan with clear and concise communication methods.
• Prepare and maintain documentation of the IT infrastructure.

Additional Technical Competencies

The candidate must have experience in one or more of the following areas:

Network & Infrastructure Engineering

• Proficient understanding of IP networking: Cisco, TCP/IP, Window Server, Network Security, Cloud Servers that includes technical and functional understanding of network security, VOIP, WAN, LAN, and internet routing and switching protocols, wireless and VPN capabilities.
• Demonstrated Data Center/Server Room build out experience (Power, Network, Cooling, etc...).
• Expertise in VMware ESX, SAN, Monitoring tools, and Operating Systems (strong understanding of Windows).
• Experience in managing VMware environment.
• Experience in managing cloud-based infrastructure like AWS/Azure.
• Expertise in windows environment in domain/Forrest/DNS/DHCP. System Administration & Maintenance
• Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
• Use of system management tool Kaseya and development of new scripts in this tool for deployment of policies.
• Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.
• Manage processes to Create, change, and delete user accounts per request from HR.
• Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.

Security, Backups & Data Protection

• Skilled in managing websense/forcepoint DLP/Web security.
• Experience in managing Kaspersky antivirus system.
• Perform regular security monitoring to identify any possible intrusions.
• Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.
• Closely monitoring and developing the procedures for backups of the servers.
• Perform regular file archival and purge as necessary.

Monitoring, Testing & Troubleshooting

• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
• Daily monitor the Server Event Logs, Firewall and other security equipment logs and also the logs of scheduled archival software.
• Test the operating system software, the networking software and also the computer hardware.
• Must possess the initiative to resolve issues before they become critical.

Project Management & Documentation

• To assist IT Head for technical issues on various projects such as support on testing, rolling out and execution of projects.
• Strong written communication skills including documentation.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)

About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.

Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.

Key Responsibilities:

Implementation & Deployment

• Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
• Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
• Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

• Design a secure access architecture for remote users, branch offices, and cloud workloads
• Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
• Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
• Configure SSO/SAML authentication

Required Qualifications:

• Bachelor's degree in IT/CS or related field
• 6–8 years of experience (L3 level)
• Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)

Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)

LEAD DATA SECURITY SOLUTION ENGINEER

Experience: 10+ Years

Location: Remote

Employment Type: Full-Time

Budget: Up to ₹35 LPA

Time Zone: US Eastern Time (ET)

Shift: US ET Night Shift

Job Description

We are looking for an experienced Lead Data Security Solution Engineer with strong expertise in database security, IAM, authentication, authorization, and enterprise data architecture.

The candidate will be responsible for assessing existing database environments, designing secure data access architectures, implementing fine-grained authorization controls, and ensuring licensed data is protected throughout its lifecycle.

The role involves working closely with database, IAM, security, infrastructure, application, data platform, and governance teams.

Key Responsibilities

1. Technical and Database Assessment

• Assess database platforms, schemas, data flows, data lineage, connectivity, and downstream dependencies.
• Review where licensed data is stored, transformed, replicated, extracted, cached, archived, and backed up.
• Evaluate existing database security capabilities and identify gaps, risks, and technical constraints.

2. Authentication and Identity Integration

• Design secure authentication for users, applications, service identities, and workloads.
• Implement or evaluate OAuth 2.0, OIDC, token-based authentication, and enterprise IAM integration.
• Integrate enterprise identities, security groups, database roles, and policy engines.
• Reduce dependency on shared and long-lived credentials.

3. Fine-Grained Authorization and Data Security

• Design and implement database-level access controls.
• Implement Row-Level Security (RLS), Column-Level Security (CLS), dynamic data masking, and policy-based filtering.
• Design secure isolation patterns for licensed datasets.
• Ensure security policies are enforced at the database layer.

4. Auditing, Monitoring, and Traceability

• Design database auditing and activity monitoring.
• Track user access, queries, exports, permission changes, and privileged activities.
• Integrate audit logs with centralized monitoring and reporting systems.
• Define audit retention and investigation requirements.

5. Data Lifecycle and Deletion

• Design access revocation mechanisms for users, projects, and expired licensing agreements.
• Define secure data deletion processes across databases, backups, archives, caches, and downstream systems.
• Ensure deletion activities are validated and supported by audit evidence.

6. Solution Architecture and Engineering

• Develop current-state and target-state security architectures.
• Prepare technical specifications, implementation plans, and reusable security patterns.
• Evaluate solution options based on security, scalability, performance, feasibility, and cost.
• Collaborate with cross-functional technical and business teams.

7. POC Design and Execution

• Design and execute Proof of Concepts (POCs) for database security scenarios.
• Validate authentication, authorization, data isolation, auditing, access revocation, and deletion.
• Document test results, technical limitations, recommendations, and implementation approaches.

Required Technical Skills

• 10+ years of experience in database engineering, data security, solution architecture, or related fields.
• Strong hands-on experience with relational databases, SQL, database architecture, schemas, roles, and privileges.
• Experience implementing Row-Level Security (RLS), Column-Level Security (CLS), dynamic masking, and fine-grained authorization.
• Strong understanding of IAM, OAuth 2.0, OIDC, token-based authentication, service identities, and workload identities.
• Experience with secrets management and secure database connectivity.
• Knowledge of database auditing, query monitoring, centralized logging, alerting, and security investigations.
• Experience securing integrations involving applications, APIs, analytical tools, and ETL/ELT pipelines.
• Understanding of data lineage, retention, lifecycle management, revocation, deletion, backup, and recovery.
• Ability to assess heterogeneous database platforms and recommend suitable security architectures.
• Strong architecture, troubleshooting, documentation, and stakeholder-management skills.

Nice to Have

• Experience with enterprise data platforms and cloud or hybrid database environments.
• Knowledge of data catalogs, access governance, and policy-enforcement technologies.
• Experience in pharmaceutical research, healthcare, scientific data, or intellectual property protection.
• Exposure to data licensing, contractual-use restrictions, and regulated environments.
• Experience designing and executing security POCs and implementing production-ready solutions.

Expected Deliverables

• Database security and capability assessment.
• Current-state and target-state security architecture.
• Database authentication and IAM integration design.
• Fine-grained authorization and data-masking design.
• Data firewalling and licensed-dataset isolation patterns.
• Audit, monitoring, and traceability framework.
• Data revocation, retention, and deletion strategy.
• Technical feasibility, gap, dependency, and risk assessments.
• POC implementation, test results, and recommendations.
• Reusable technical documentation and operational handover.

Work Requirements

• Fully remote opportunity.
• Full-time employment.
• Must be comfortable working in the US Eastern Time (ET) night shift.
• Budget: Up to ₹35 LPA.

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Position

Solution Architect/Technical Architect

Experience

·       12 - 16+ years of overall IT experience

·       Significant hands-on experience working as a Solution/Technical Architect

Education

·       B.Tech / M.Tech / MCA / MBA or equivalent

Certifications

·       TOGAF® certification (Level 1/2) preferred to ensure alignment with enterprise architecture standards

·       Microsoft Certified: Azure Solutions Architect Expert (AZ-305) and other supporting certifications such as AZ-104, AZ-400, or AZ-500 preferred.

Key Responsibilities

·       Define and evolve the target architecture for .NET-based distributed platform.

·       Architect highly configurable solutions on Azure with strong focus on scalability, tenant isolation, resilience, maintainability, and speed of delivery.

·       Lead solution design across ASP.NET Core services, REST APIs, event-driven workflows, background processing, integration patterns, and shared platform capabilities.

·       Drive adoption of modern .NET and cloud-native patterns including microservices, domain-driven design, event-driven architecture, API-first design, and secure service-to-service communication.

·       Partner with engineering teams on real implementation decisions, review critical designs and code paths, and provide hands-on guidance for performance, operability, and production readiness.

·       Architect Azure-native deployment patterns using AKS, containers, API Management, Service Bus/Event Grid or equivalent messaging, Key Vault, managed observability, and CI/CD automation.

·       Work with data and platform teams on PostgreSQL-backed service design, data access patterns, caching strategies, and database performance for high-volume transactional workloads.

·       Define non-functional requirements and architecture guardrails around performance, scalability, availability, recoverability, security, compliance, and cost efficiency.

·       Embed DevSecOps and observability into platform design through telemetry, tracing, alerting, diagnostics, secrets management, and release governance.

·       Evaluate emerging technologies, AI-assisted engineering enablers, and modernization options pragmatically, with clear build-vs-buy and risk-reward trade-offs.

·       Mentor senior engineers and technical leads, contribute to architectural governance, and create reusable patterns, reference implementations, and standards across teams.

·       Bachelor’s or master’s degree in computer science, Engineering, or a related field.

·       12–16 years of experience in software engineering, solution architecture, or platform engineering, with significant experience in Microsoft technology stacks.

Essential Qualification and Skills

·       Strong hands-on expertise in C#, .NET / .NET Core / .NET 8, ASP.NET Core, Web APIs, background services, and enterprise application design.

·       Deep experience in architecting distributed systems using microservices, asynchronous messaging, event-driven design, and API-led integration patterns.

·       Strong Azure architecture experience, preferably across AKS, App Services, Functions, API Management, Key Vault, Service Bus, Event Grid, Storage, monitoring, and identity integration patterns.

·       Experience designing and supporting platforms, configurable product architectures, and integration-heavy enterprise solutions.

·       Strong understanding of relational databases and performance engineering, especially SQL Server and/or PostgreSQL, including schema design, indexing, query tuning, and transaction handling.

·       Solid grasp of non-functional architecture including performance, scalability, availability, fault isolation, observability, and disaster recovery.

·       Strong understanding of application and platform security including authentication, authorization, secrets management, encryption, secure coding, and compliance-oriented design.

·       Experience with containers, Kubernetes, CI/CD, infrastructure automation, and modern DevSecOps practices.

·       Ability to make sound architecture decisions with a balance of pragmatism, delivery speed, engineering quality, and long-term maintainability.

·       Strong communication and stakeholder management skills across product, engineering, architecture, operations, security, and client-facing teams.

Skills & Competencies

·       Experience in insurance, Insurtech, BFSI, or other regulated, transaction-heavy domains.

·       Exposure to policy administration, billing, accounting, claims, workflow orchestration, or reporting platforms within the insurance value chain.

·       Experience with architecture frameworks and modelling approaches such as TOGAF, domain-driven design, UML, C4, or equivalent practical architecture methods.

·       Familiarity with mixed technology landscapes involving .NET, Java/Spring Boot, enterprise workflow tools, and integration ecosystems.

·       Experience with observability and reliability tooling such as Datadog, Dynatrace, Application Insights, Open Telemetry, Grafana, or similar.

·       Working knowledge of Angular, React, or modern web application architecture patterns.

·       Exposure to AI-enabled engineering, intelligent automation, or embedding AI capabilities into enterprise platforms.

·       Leadership experience across globally distributed or virtual teams.