LA- Azure Cloud Security Architect

Position Description
Job Description: Azure Cloud Security Architect
Experience: 10–12 YearsLocation: Bangalore
Job Summary
Looking for an experienced Azure Cloud Security Architect to design and implement secure Azure and hybrid infrastructure architectures aligned with Zero Trust and Secure by Design principles. The role focuses on network segmentation, internal traffic control, identity security, privileged access, infrastructure isolation, and enterprise security risk reduction.
Key Responsibilities
Design and implement secure Azure and hybrid cloud architectures using VNets, subnets, NSGs, Azure Firewall, routing, Private Endpoints, and hybrid connectivity.
Implement network segmentation, east west traffic inspection, microsegmentation, workstation to workstation restrictions, and controls to prevent unauthorized lateral movement.
Define and enforce security zones across user, server, management, backup and recovery, virtualization, and privileged administration environments.
Strengthen identity security through Microsoft Entra ID, Active Directory Tier 0 isolation, RBAC, PIM, Conditional Access, MFA, and administrative segregation.
Design secure privileged administration using PAM, jump hosts, Privileged Administrative Workstations (PAWs), and controlled management plane access.
Implement isolation and security controls for backup and recovery environments, hypervisors, and vCenter infrastructure.
Establish cloud security governance using Azure Policy and Microsoft Defender for Cloud, with appropriate security monitoring and logging.
Develop a security architecture roadmap covering network segmentation, identity security, PAM, infrastructure isolation, and cloud security improvements.
Conduct security architecture assessments, identify risks, document mitigation measures and residual risks, and track remediation initiatives.
Required Skills
10–12 years of relevant experience in Azure cloud architecture, infrastructure security, or hybrid cloud security.
Strong hands on expertise in Azure networking, Azure Firewall, NSGs, routing, Private Endpoints, and hybrid connectivity.
Practical experience in network segmentation, east west traffic control, and lateral movement prevention.
Strong knowledge of Microsoft Entra ID, Active Directory security, Tier 0 isolation, RBAC, PIM, and privileged access controls.
Experience with PAM, jump host architecture, PAWs, backup network segregation, and virtualization security.
Expertise in Zero Trust architecture, cloud security governance, security risk assessment, and architecture documentation.
Your future duties and responsibilities
Required Qualifications To Be Successful In This Role
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
Come join our team—one of the largest IT and business consulting services firms in the world.

Work arrangement
No