Cyber security architect

12+ years of overall experience in Cybersecurity, develop and maintain end‑to‑end security architectures based on Zero Trust, SASE, SSE, and well‑architected cloud frameworks.
Strong background in networking and security architecture in pre‑sales, consulting, or professional services roles.
Design and implement cloud and on‑prem security controls including identity, network, application, workload, data, and edge security.
Demonstrated experience leading technical architecture discussions with senior stakeholders, CISOs, Enterprise Security Architects, and cloud infrastructure leaders.
Build and maintain security control frameworks ensuring effective detection, response, compliance, and hardening of enterprise environments.
Proven ability to design security reference architectures for cloud‑only and hybrid enterprise environments, at scale.
Evaluate, integrate, and optimize Zero Trust platforms (e.g., ZTNA, SWG, CASB, DLP, EDR/XDR, CSPM, CIEM).
Conduct gap assessments, provide remediation plans, and drive continuous improvement in security posture.
Guide enterprises in adopting Zero Trust network architecture and modern segmentation methodologies.
Strong knowledge of enterprise security standards:
ISO 27001, NIST, CIS Benchmarks, PCI DSS, SOX, OWASP
Ability to map architecture and controls to compliance requirements.
Create high-quality HLDs, LLDs, Visio diagrams, and executive‑ready presentations.
Stay updated with modern threat frameworks such as MITRE ATT&CK , NIST CSF, CIS Controls, and emerging cloud security trends.
Technical Skills:
Expertise in securing cloud services in multi-cloud environments and driving activities like integration with 3rd party monitoring tools, encryption tools and security best practices etc.
Prior experience with enterprise security solutions such as Firewalls, WAF, IPS, Anti-DDOS, endpoint security, SIEM, (IDS/IPS), NAC/ISE, vulnerability management, email Security, PAM, EDR, Web proxy products.
Demonstrate deep knowledge of networking and security architecture and ability to engage in technical discussions with networking and security architects of large enterprises.
Practical understanding of:
ZTNA, SWG, CASB, CSPM, CIEM, DLP, EDR/XDR, VPN replacement technologies
Experience designing Zero Trust architectures using platforms like:
Zscaler (ZIA/ZPA/ZDX)
Netskope (NG-SWG, CASB, ZTNA, DLP)
Palo Alto (Prisma Access, Strata, Cortex)
Other next‑gen Zero Trust/SASE platforms
Must have experience with web technologies including HTTP, HTTPS, SSL/TLS, VPNs, Firewall, Proxy, IDS/IPS)
Must have experience, knowledge and be able to demonstrate In-depth knowledge of frameworks like: ZTNA, SASE and SSE.
Have good experience creating design documents (HLD, LLD) diagrams (Visio) and presentations (PPT)
Familiarity with compliance & security standards across the enterprise IT landscape. Knowledge of compliances (PCI DSS, SOX etc.) and IS standards (ISO 27001, BS25999, ISO 2700 X, OWASP, CIS, etc).