Principal Information Security Architect

About the role

A highly experienced Principal Information Security Engineer is sought to lead the design, implementation and optimisation of enterprise security solutions. The role covers Microsoft security technologies, SIEM engineering, DLP, endpoint and cloud security, vulnerability management and DevSecOps, strengthening enterprise security architecture and protecting critical information assets.

Key responsibilities

• Design, implement and optimise enterprise information security solutions and technical controls.
• Deploy and manage SIEM platforms such as IBM QRadar and Microsoft Sentinel, covering log integration, detection engineering, analytics and automation.
• Implement Microsoft security solutions including Defender XDR, Intune, Purview and Entra ID.
• Lead DLP strategy, including deployment, data classification, policy development, incident investigation and compliance reporting.
• Maintain privileged access management, secure access, endpoint protection and application security controls.
• Strengthen cloud security across Microsoft Azure and AWS environments.
• Conduct vulnerability assessments, security and risk reviews, and remediation planning.
• Integrate security controls into CI/CD pipelines and promote secure SDLC and DevSecOps practices.
• Perform security architecture reviews, infrastructure hardening and technical risk assessments.
• Lead technical security initiatives and work with Infrastructure, Cloud, Development, Compliance and Business teams.
• Support security audits, regulatory compliance, vendor assessments and continuous security improvement.

Required profile

• Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science or a related discipline.
• 8-12+ years of experience in Information Security Engineering, Cybersecurity or Security Architecture.
• Proven experience implementing and managing enterprise security solutions.
• Strong technical leadership, analytical, problem-solving and stakeholder management capabilities.

Required skills

• SIEM and security analytics: IBM QRadar, Microsoft Sentinel, log integration, KQL, detection engineering.
• Microsoft security stack: Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud, Intune, Purview, Entra ID.
• Data protection: DLP architecture, policy administration, data classification, Forcepoint DLP.
• Identity and access: PAM, IAM, Active Directory security.
• Network and application security: WAF, secure access, API security, infrastructure hardening.
• Cloud security: Microsoft Azure, AWS, workload protection.
• Vulnerability management, VAPT, DevSecOps, CI/CD security.
• Preferred: hands-on experience with CyberArk PAM, Zscaler, Imperva, Fortinet, Forescout; preferred certifications include CISSP, CISM, CEH, CHFI, Microsoft security/Azure certifications, ISO 27001 Lead Implementer/Auditor and Forcepoint DLP.