Principal Security Architect (CISSP Preferred; AWS Security Specialty/CCSP is a plus)

We are looking for a Software Dev Principal Engineer to lead the security design and strategy for our private cloud infrastructure hosted in colocation facilities. This is a senior individual contributor role with significant influence over architecture decisions, security standards, and engineering culture. You will serve as the technical authority on all matters related to infrastructure security, working closely with network, platform, and compliance teams to build and maintain a resilient, zero-trust-aligned environment.

Key Responsibilities:

Own the end-to-end security architecture for colocation-based private cloud environments, including compute, storage, networking, and virtualization layers

Define and enforce security standards, reference architectures, and design patterns across infrastructure and application teams

Lead threat modeling exercises for new systems, services, and major infrastructure changes

Evaluate and guide adoption of security tooling including SIEM, IDS/IPS, PAM, microsegmentation, and secrets management solutions

Provide security architecture guidance for hybrid connectivity between on-premises/colo environments and public cloud workloads (primarily AWS)

Collaborate with the IAM team to design and enforce least-privilege access models across both private and cloud environments

Define and enforce modern security standards, reference architectures, and design patterns across infrastructure and application teams

Drive the security architecture roadmap in alignment with business objectives and regulatory requirements (SOC 2, ISO 27001, ISO 42001, NIST CSF)

Mentor senior and mid-level engineers, conducting design reviews and architectural assessments

Partner with legal, risk, and compliance teams on data residency, sovereignty, and audit readiness

Represent security architecture in executive briefings, vendor evaluations, and cross-functional planning sessions

Essential Business Experience and Technical Skills: ­­

Experience:

12+ years in information security, with at least 5 years focused on security architecture.

Deep expertise in private cloud and colocation environments — physical security controls, data center networking, bare-metal and hypervisor-level security (VMware, KVM, or similar)

Strong experience with network security architecture: firewalls, VLANs, BGP/OSPF security, microsegmentation, and east-west traffic control

Hands-on familiarity with AWS security services and constructs (VPC, IAM, Security Hub, GuardDuty, AWS Organizations, SCPs) in a hybrid cloud context

Experience architecting secure connectivity between colo and cloud environments (Direct Connect, VPN, SD-WAN)

Demonstrated experience with PKI, certificate lifecycle management, secrets management (HashiCorp Vault or equivalent), and encryption at rest and in transit

Proven track record leading security architecture for large-scale, regulated environments

Proven cross-functional leadership skills to motivate and inspire the team.

Ability and desire to not just think outside the box but find a new box when necessary.

Skills & Knowledge:

Deep understanding of zero-trust principles and practical implementation strategies

Strong command of identity and access management patterns across on-prem and cloud

Familiarity with container security and Kubernetes hardening in private environments (a plus)

Working knowledge of infrastructure-as-code from a security review and guardrails perspective (Terraform, Ansible)

Excellent ability to communicate complex security concepts to technical and non-technical audiences

Strong documentation skills — able to produce architecture diagrams, threat models, and decision records

Certifications (Preferred):

CISSP, CISM, or SABSA

AWS Certified Security – Specialty

CCSP or equivalent cloud security certification

#LI-DS9

#LI-Pune

#LI-Hybrid

#LI-CISSP

#LI-zerotrust

#LI-SecurityArchitect

#LI-CCSP