Principal Security Architect

We are looking for a Principal Security Architect to lead the security design and strategy for our private cloud infrastructure hosted in colocation facilities. This is a senior individual contributor role with significant influence over architecture decisions, security standards, and engineering culture. You will serve as the technical authority on all matters related to infrastructure security, working closely with network, platform, and compliance teams to build and maintain a resilient, zero-trust-aligned environment.

• →12+ years in information security, with at least 5 years focused on security architecture.
• →Deep expertise in private cloud and colocation environments — physical security controls, data center networking, bare-metal and hypervisor-level security (VMware, KVM, or similar)
• →Strong experience with network security architecture: firewalls, VLANs, BGP/OSPF security, microsegmentation, and east-west traffic control
• →Hands-on familiarity with AWS security services and constructs (VPC, IAM, Security Hub, GuardDuty, AWS Organizations, SCPs) in a hybrid cloud context
• →Experience architecting secure connectivity between colo and cloud environments (Direct Connect, VPN, SD-WAN)
• →Demonstrated experience with PKI, certificate lifecycle management, secrets management (HashiCorp Vault or equivalent), and encryption at rest and in transit
• →Proven track record leading security architecture for large-scale, regulated environments
• →Proven cross-functional leadership skills to motivate and inspire the team.
• →Ability and desire to not just think outside the box but find a new box when necessary.

• Deep understanding of zero-trust principles and practical implementation strategies
• Strong command of identity and access management patterns across on-prem and cloud
• Familiarity with container security and Kubernetes hardening in private environments (a plus)
• Working knowledge of infrastructure-as-code from a security review and guardrails perspective (Terraform, Ansible)
• Excellent ability to communicate complex security concepts to technical and non-technical audiences
• Strong documentation skills — able to produce architecture diagrams, threat models, and decision records

• CISSP, CISM, or SABSA
• AWS Certified Security – Specialty
• CCSP or equivalent cloud security certification

#LI-DS9

#LI-Pune

#LI-Hybrid

#LI-CISSP