Cyber Security Architect - Hyderabad

Role overview

Cyber Security Architect - Hyderabad at Deloitte

Work you'll do As an Architect on the internal services team, you will be responsible for: Define security architecture vision, principles, reference architectures, and roadmaps for enterprise and cloud technology, aligned with business strategy and organizational risk appetite.

Responsibilities

• Design and assure security architectures for on-premises, cloud, hybrid, and multi-cloud environments across infrastructure, applications, data, identity, networking, and integration services.
• Lead security architecture and design reviews throughout the delivery lifecycle; translate business, regulatory, privacy, resilience, and threat requirements into control objectives; and document risks, decisions, exceptions, and remediation actions.

Employment details

• Location: Hyderabad Shift Timings: 2 PM to 11 PM Qualifications Required: 13+ years of experience in cyber security, including security architecture or security design roles.
• Bachelor’s or Master’s degree in cyber security, computer science, engineering, or information systems, or 13+ years of professional experience in cyber security.
• Experience producing and governing security architectures for enterprise, cloud, hybrid, infrastructure, application, and data environments, including identity and access management, network and platform security, cryptography, data protection, application programming interface security, logging, monitoring, resilience, and secure software delivery.
• Experience designing and assuring on-premises data-centre and infrastructure security and on-premises-to-cloud, network, or server migration architectures.
• Experience with Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP), including hybrid connectivity, landing zones, identity and access management, network architecture, compute and container platforms, cloud-native security services, infrastructure as code, continuous integration and continuous delivery pipelines, and workload migration.
• Experience leading security design reviews, threat modelling, architecture risk assessments, risk treatment, and remediation planning.
• Experience applying security architecture methods or frameworks, including Sherwood Applied Business Security Architecture (SABSA), the National Institute of Standards and Technology Cybersecurity Framework, National Institute of Standards and Technology Special Publication 800-53, or International Organization for Standardization/International Electrotechnical Commission 27001, and designing security and governance controls for AI and generative AI solutions.
• Preferred: One or more of the following certifications: Certified Information Systems Security Professional, Information Systems Security Architecture Professional, Certified Cloud Security Professional, Certified Information Security Manager, SABSA, or a cloud security architecture certification.
• Experience applying the National Institute of Standards and Technology AI Risk Management Framework, International Organization for Standardization/International Electrotechnical Commission 42001, or Open Web Application Security Project guidance for large language model and generative AI applications.
• Experience working in Agile, product, development, security, and operations (DevSecOps), or traditional project delivery models.
• Location: Hyderabad [Telangana] [India]

About the employer

• The Architect will define and govern secure enterprise and cloud architecture across Deloitte’s technology landscape.
• The team At Deloitte, we’re all about collaboration.

Additional role details

• The Architect partners with business, solution architecture, engineering, risk, and delivery teams to translate business requirements into security architectures, patterns, and controls.
• The Architect will lead security design reviews, identify and communicate technology risks, document architecture decisions, and provide pragmatic guidance that enables secure delivery in line with Deloitte security policies, standards, and risk appetite.
• Develop reusable security patterns, configuration baselines, automated guardrails, and controls for infrastructure as code, policy as code, DevSecOps pipelines, and continuous compliance.
• Assess emerging technologies, third-party services, and artificial intelligence (AI)-enabled solutions; provide risk-based recommendations, facilitate architecture review forums, and coach architecture and engineering teams on secure-by-design practices.
• And nowhere is this more apparent than among our 2,000-strong internal services team.
• With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm.
• This enables them to focus all of their efforts on delivering the best service possible to their clients.
• Covering seven distinct areas; Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience.