Job Description
We are looking for a highly experienced, hands-on Security Architect to lead the architecture and design phase of a Greenfield security implementation project.
The ideal candidate must have strong technical expertise across enterprise security solutions, including Proofpoint, CyberArk, ManageEngine, Microsoft Sentinel, and the broader Microsoft security ecosystem.
This role requires a client-facing professional who can independently lead technical discussions, design secure and scalable solutions, evaluate alternative approaches, and provide architectural guidance to implementation and professional services teams.
Candidates with hands-on security architecture and engineering experience are required. Governance-only, risk, or compliance-focused profiles will not be considered.
Key Responsibilities
Lead technical discussions and provide recommendations on security architecture, industry best practices, and solution design.
Lead the architecture and design phase of Greenfield security implementations.
Design and architect security solutions using Proofpoint, CyberArk, ManageEngine, and Microsoft Sentinel.
Develop security architecture and integration strategies across Microsoft Defender, Microsoft Intune, Microsoft Entra ID, and related security technologies.
Design integrations between Microsoft security solutions and third-party security platforms.
Evaluate alternative technical approaches and present their advantages, disadvantages, risks, dependencies, and implementation trade-offs.
Define target-state security architecture, solution components, integration flows, and implementation roadmaps.
Prepare and maintain High-Level Design (HLD), Low-Level Design (LLD), architecture diagrams, technical specifications, and integration documentation.
Provide technical direction and architectural oversight to professional services and implementation teams.
Review implementation approaches and ensure alignment with approved architecture and security requirements.
Identify technical gaps, security risks, dependencies, and potential integration challenges, and recommend practical solutions.
Communicate complex technical concepts clearly to stakeholders and technical delivery teams.
Mandatory Technical Skills
1. Security Architecture
8–10+ years of experience in security architecture, security engineering, or enterprise security solution design.
2. Proofpoint
Hands-on experience designing and integrating enterprise email security and threat protection solutions.
3. CyberArk
Strong knowledge of Privileged Access Management (PAM), privileged account security, and access control architecture.
4. ManageEngine
Hands-on experience with relevant enterprise security and identity/access management solutions.
5. Microsoft Sentinel
Experience designing SIEM solutions, security monitoring, log integration, analytics, and incident detection workflows.
6. Microsoft Defender Suite
Experience with relevant Microsoft Defender security solutions and their integration into enterprise security architecture.
7. Microsoft Intune
Knowledge of endpoint management, device compliance, endpoint security policies, and integration with Microsoft security services.
8. Microsoft Entra ID
Experience with identity and access management, Conditional Access, authentication, and identity security.
9. Multi-Vendor Integration
Proven ability to design and integrate Microsoft and third-party security products.
10. Architecture Documentation
Experience preparing HLDs, LLDs, architecture diagrams, technical specifications, and implementation guidance.
11. Client-Facing Communication
Excellent spoken and written English, with the ability to lead technical discussions and explain complex architectural decisions.
Preferred Qualifications
Experience delivering Greenfield security architecture and implementation projects.
Experience supporting multiple clients or enterprise security transformation initiatives.
Relevant certifications such as SC-100, SC-200, CISSP, or CyberArk Defender/Sentry.
Experience coordinating with implementation partners, system integrators, and professional services teams.
Strong understanding of enterprise security best practices, identity security, endpoint protection, SIEM, and privileged access management.
Candidate Profile – What We Are Looking For
A hands-on Security Architect who can independently lead technical discussions and make architecture decisions.
A professional who communicates confidently in English and can engage effectively with stakeholders.
A technically credible individual who can challenge, evaluate, and guide implementation partners.
Someone experienced in solution design, integration planning, technical documentation, and implementation strategy.