Senior Enterprise security Engineer

Total Experience: 10 & Above years

Key Responsibilities:

Enterprise Security Architecture: Define and maintain the enterprise cybersecurity architecture roadmap aligned with business and technology strategy. Develop security reference architectures, standards, patterns, and blueprints across the enterprise. Ensure security-by-design principles are embedded into technology initiatives and transformation programs. Lead architecture reviews and provide security governance for major projects and strategic initiatives. Establish target-state security architecture for hybrid cloud, digital banking, API ecosystems, AI platforms, and data environments.

Cybersecurity Strategy Governance: Develop long-term cybersecurity strategy and investment roadmap. Partner with Technology, Risk, Compliance, Audit, and Business stakeholders to manage cyber risk. Establish security architecture governance processes and architecture review boards. Develop security policies, standards, controls, and procedures aligned with industry frameworks.

Cloud Infrastructure Security Architect: Secure solutions across Azure, AWS, and hybrid cloud environments. Define cloud security controls, landing zones, Zero Trust architectures, and secure network designs. Drive adoption of Infrastructure-as-Code security, DevSecOps, and cloud-native security services.

Identity Access Management:

 Define enterprise IAM strategy including:

• Single Sign-On (SSO)

• Multi-Factor Authentication (MFA)

• Privileged Access Management (PAM)

• Identity Governance Administration (IGA)

• Customer Identity Access Management (CIAM) Application

Data Security: Establish secure application architecture patterns. Drive API security, microservices security, and secure SDLC practices. Define data protection strategies including encryption, tokenization, key management, and data loss prevention. Review emerging technologies and assess security implications.

Regulatory Compliance Risk Management: Ensure alignment with banking regulations and security standards.