Cloud Security Architect

NexTbil Tech

. Design and maintain secure Azure cloud architecture standards, reference architectures, and reusable security patterns .

Posted 10/2/2026full-timeHyderabad • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining secure Azure cloud architectures, implementing identity and access security, and ensuring compliance with industry standards. Proficient in translating security requirements into practical cloud architecture solutions and collaborating with cross-functional teams.

Highest-signal resume keywords

Microsoft Azure Security ServicesAzure PolicyIdentity Architecture DesignCloud Governance ControlsISO 27001 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecuritySecurity ArchitectureInfrastructure SecurityVulnerability ManagementData ProtectionCryptographic ControlsSecure ConfigurationPolicy-as-CodeIdentity and Access ManagementNetwork Security

Soft Skills

Strong CommunicationStakeholder ManagementDocumentation SkillsInfluencing Skills

Tools & Technologies

Microsoft Entra IDAzure FirewallMicrosoft Defender for CloudMicrosoft SentinelKey VaultBicepARM TemplatesTerraformAzure DevOpsGitHub Actions

Certifications & Qualifications

Azure Security Engineer AssociateAzure Solutions Architect ExpertCybersecurity Architect ExpertCISSPCCSPCCSKSABSATOGAF

Industry Keywords

NIST Cybersecurity FrameworkCIS ControlsCloud ComplianceAuditRisk Assessment

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityKubernetesTerraformVault

About the role

Key responsibilities & impact

Design and maintain secure Azure cloud architecture standards, reference architectures, and reusable security patterns
Define and govern Azure landing zone security controls, management group structures, subscription governance, Azure Policy, resource tagging, network segmentation, security baselines, and compliance guardrails
Architect identity and access security using Microsoft Entra ID, privileged access controls, conditional access, role-based access control, managed identities, and least-privilege principles
Provide security architecture guidance for Azure networking, including hub-and-spoke models, private endpoints, network security groups, Azure Firewall, DDoS protection, application gateways, and secure connectivity patterns
Define data protection and cryptographic controls, including Key Vault, encryption, secrets management, certificate management, backup, recovery, and secure data storage
Advise DevSecOps teams on infrastructure as code, secure configuration, policy-as-code, vulnerability management, container security, and automated compliance checks
Partner with security operations teams to incorporate Azure logging, monitoring, threat detection, Microsoft Defender for Cloud, Microsoft Sentinel, and incident response requirements
Review cloud solution designs, identify security risks, document architecture decisions, and provide remediation guidance
Collaborate with cloud engineering, infrastructure, application, DevSecOps, security operations, risk, and business teams

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline
5+ years of experience in cybersecurity, cloud security, infrastructure security, security architecture, or a related technical security role
Strong hands-on knowledge of Microsoft Azure security services, including Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Sentinel, Azure Firewall, private networking, and secure workload configuration
Experience designing secure Azure landing zones, identity architectures, network security models, logging architectures, and cloud governance controls for enterprise environments
Ability to translate security, risk, compliance, and business requirements into practical cloud architecture decisions, design documents, and implementation guidance
Working knowledge of ISO 27001, NIST Cybersecurity Framework, CIS Controls, cloud security benchmarks, and regulatory compliance expectations
Strong communication, stakeholder management, documentation, and influencing skills
Microsoft certifications such as Azure Security Engineer Associate, Azure Solutions Architect Expert, Cybersecurity Architect Expert, or equivalent Azure-focused security credentials preferred
Professional certifications such as CISSP, CCSP, CCSK, SABSA, TOGAF, or equivalent certifications preferred
Experience with Bicep, ARM templates, Terraform, Azure DevOps, GitHub Actions, or equivalent deployment pipelines preferred
Exposure to application security, container security, Kubernetes security, API security, zero trust architecture, secure software delivery, and cloud-native workload protection preferred
Familiarity with AWS or Google Cloud security concepts beneficial
Experience supporting audit, risk assessment, control evidence collection, cloud compliance reporting, and remediation planning preferred

Benefits

Comp & perks

Performance-based bonuses
Flexible working options, including remote and hybrid working models
Comprehensive health insurance
Wellness initiatives and physical and mental well-being resources
Continuous learning through training programs
Mentorship
Career development paths
Team-building activities and social events
Supportive, inclusive, growth-focused work environment
Competitive compensation and performance-based incentives
Medical insurance
Structured learning, development, and career growth opportunities