Job Description

Security Architecture & Design

Define cloud security architecture and controls aligned with organizational, regulatory, and industry standards.

Design secure landing zones, identity models, network security boundaries, and data protection strategies for Azure and AWS.

Provide guidance on secure patterns for application, infrastructure, and platform design.

Identity & Access Management (IAM)

Develop and enforce IAM principles such as Zero Trust, least privilege, conditional access, and role-based access controls.

Oversee security posture of Azure AD/Entra ID, AWS IAM, and federated identity integrations.

Implement privileged access management and credential governance.

Cloud Security Governance & Compliance

Establish cloud security policies, standards, baselines, and guardrails.

Ensure compliance with frameworks (ISO, SOC2, CIS benchmarks, NIST, regulatory requirements).

Define and monitor governance controls such as policies, tagging standards, cost controls, and resource compliance.

Threat Protection & Monitoring

Implement and optimize cloud-native security tools (Azure Defender, AWS Security Hub, GuardDuty, SIEM/SOAR).

Monitor for vulnerabilities, misconfigurations, and emerging threats across cloud environments.

Support threat modeling, incident response, and forensics readiness.

Data Protection & Encryption

Define strategies for data classification, encryption (at rest/in transit), key management (Azure Key Vault, AWS KMS).

Ensure secure handling of sensitive and regulated data across applications and services.

Provide guidance on backup security, retention, and recovery.

Risk Management & Security Assurance

Identify cloud security risks and develop mitigation strategies.

Conduct technical risk assessments, penetration test coordination, and remediation planning.

Support architectural reviews and change management from a security perspective.

Responsibilities

Security Architecture & Design

Define cloud security architecture and controls aligned with organizational, regulatory, and industry standards.

Design secure landing zones, identity models, network security boundaries, and data protection strategies for Azure and AWS.

Provide guidance on secure patterns for application, infrastructure, and platform design.

Identity & Access Management (IAM)

Develop and enforce IAM principles such as Zero Trust, least privilege, conditional access, and role-based access controls.

Oversee security posture of Azure AD/Entra ID, AWS IAM, and federated identity integrations.

Implement privileged access management and credential governance.

Cloud Security Governance & Compliance

Establish cloud security policies, standards, baselines, and guardrails.

Ensure compliance with frameworks (ISO, SOC2, CIS benchmarks, NIST, regulatory requirements).

Define and monitor governance controls such as policies, tagging standards, cost controls, and resource compliance.

Threat Protection & Monitoring

Implement and optimize cloud-native security tools (Azure Defender, AWS Security Hub, GuardDuty, SIEM/SOAR).

Monitor for vulnerabilities, misconfigurations, and emerging threats across cloud environments.

Support threat modeling, incident response, and forensics readiness.

Data Protection & Encryption

Define strategies for data classification, encryption (at rest/in transit), key management (Azure Key Vault, AWS KMS).

Ensure secure handling of sensitive and regulated data across applications and services.

Provide guidance on backup security, retention, and recovery.

Risk Management & Security Assurance

Identify cloud security risks and develop mitigation strategies.

Conduct technical risk assessments, penetration test coordination, and remediation planning.

Support architectural reviews and change management from a security perspective.

Qualifications

Security Architecture & Design

Define cloud security architecture and controls aligned with organizational, regulatory, and industry standards.

Design secure landing zones, identity models, network security boundaries, and data protection strategies for Azure and AWS.

Provide guidance on secure patterns for application, infrastructure, and platform design.

Identity & Access Management (IAM)

Develop and enforce IAM principles such as Zero Trust, least privilege, conditional access, and role-based access controls.

Oversee security posture of Azure AD/Entra ID, AWS IAM, and federated identity integrations.

Implement privileged access management and credential governance.

Cloud Security Governance & Compliance

Establish cloud security policies, standards, baselines, and guardrails.

Ensure compliance with frameworks (ISO, SOC2, CIS benchmarks, NIST, regulatory requirements).

Define and monitor governance controls such as policies, tagging standards, cost controls, and resource compliance.

Threat Protection & Monitoring

Implement and optimize cloud-native security tools (Azure Defender, AWS Security Hub, GuardDuty, SIEM/SOAR).

Monitor for vulnerabilities, misconfigurations, and emerging threats across cloud environments.

Support threat modeling, incident response, and forensics readiness.

Data Protection & Encryption

Define strategies for data classification, encryption (at rest/in transit), key management (Azure Key Vault, AWS KMS).

Ensure secure handling of sensitive and regulated data across applications and services.

Provide guidance on backup security, retention, and recovery.

Risk Management & Security Assurance

Identify cloud security risks and develop mitigation strategies.

Conduct technical risk assessments, penetration test coordination, and remediation planning.

Support architectural reviews and change management from a security perspective.

About Us

At Zensar, we're experience-led everything. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.

Part of the $4.8 billion RPG Group, we're a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.