Cyber Security Architect

About the position

Looking for Azure Cloud Security Architect. The person should have good understanding in system threat modeling. Experience performing threat modeling and design reviews to assess security implications and mitigating controls for the security solutions. Should be good in documenting, taking the screen shots of the system and able to deliver quality security documents of the system. Should have very good understanding of cyber security related concepts (Just example the way Authorization and Authorization work etc.,). Because this understanding is necessary to deliver quality documents. He may not have system design skills of security but should be able to understand the existing system and able to manage the operations. Shall have experience on security monitoring on platform and application level. Expertise in Azure security, in-depth understanding of their service catalogs, security offerings and automation opportunities. Deep experience on implementing security controls on AKS Cluster, Active Directory, MFA, API’s and ADB2C. Experience on control plane and data plane security implementation. Good knowledge on zero trust security architecture. Knowledge and implementation experience on mTLS and azure managed identity.

Responsibilities

• Perform threat modeling and design reviews to assess security implications and mitigating controls.
• Document and deliver quality security documents of the system.
• Understand and manage existing systems and operations.
• Monitor security on platform and application levels.
• Implement security controls on AKS Cluster, Active Directory, MFA, API’s and ADB2C.
• Implement control plane and data plane security.
• Apply knowledge of zero trust security architecture.
• Implement mTLS and azure managed identity.

Requirements

• Good understanding of system threat modeling.
• Experience in threat modeling and design reviews.
• Strong documentation skills.
• Understanding of cyber security concepts.
• Experience in security monitoring.
• Expertise in Azure security and its service catalogs.
• Deep experience in implementing security controls.
• Knowledge of zero trust security architecture.
• Experience with mTLS and azure managed identity.

Nice-to-haves

• Experience with Security Risk Management Plan.
• Familiarity with Cybersecurity Bill of Material.
• Knowledge of threat modeling approaches.
• Experience with asset identification and application overview.
• Understanding of threat mapping (STRIDE).
• Experience with risk rating and tools.
• Familiarity with security risk analysis (e.g., CVSS 3.0 / 3.1).
• Experience with security risk evaluation and V&V activities.