Azure Security Architect

Azure Security Architect

Publication Date: Sep 12, 2026

Ref. No: 550364

Location

Mumbai, IN

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 54,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand. A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

About Atos Group

Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Work Location- Mumbai/ Bangalore

Role Overview

We are looking for an experienced Azure Security Architect to design and architect secure, resilient and scalable Microsoft Azure environments. The role will focus on Microsoft Security, Azure security architecture, identity, cloud security, SIEM/SOAR, endpoint security, data security and AI security.

The candidate will work with enterprise customers to assess security requirements, define security architecture, develop HLD/LLD, recommend Microsoft security solutions and provide technical leadership through implementation and operational transition.

The role also requires extensive hands-on experience in applying AI and GenAI technologies to automate and optimize enterprise processes. This includes designing secure Azure AI workloads using Microsoft Foundry and Azure OpenAI, building RAG solutions and AI agents, integrating intelligent automation with enterprise systems, and establishing appropriate data protection, responsible AI and operational controls.

Key Responsibilities

• Azure Security Architecture

• Design end-to-end security architecture for Microsoft Azure and hybrid cloud environments.

• Develop security HLD/LLD, architecture diagrams, security controls and technical design documentation.

• Conduct security assessments and identify architectural gaps, risks and improvement opportunities.

• Define defense-in-depth, Zero Trust and security-by-design architecture.

• Design security controls across identity, endpoint, network, application, data and cloud layers.

• Define security architecture standards, patterns and reference architectures.

• Provide technical leadership during implementation, migration and transformation programmes.

• Microsoft Security Architecture

Strong experience architecting and integrating the Microsoft security ecosystem, including:

• Microsoft Defender

• Microsoft Defender for Endpoint (MDE / EDR)

• Microsoft Defender for Servers

• Microsoft Defender for Identity

• Microsoft Defender for Office 365

• Microsoft Defender for Cloud Apps (MDCA / CASB)

• Microsoft Defender for Cloud

• Microsoft Defender Vulnerability Management

• Microsoft Defender XDR

• Microsoft Defender for Cloud CSPM / CNAPP capabilities

• Microsoft Sentinel

• Microsoft Sentinel SIEM/SOAR architecture

• Data connectors and log ingestion architecture

• Analytics rules and detection engineering

• Automation rules and Logic Apps

• Playbooks and SOAR orchestration

• Incident management and investigation workflows

• UEBA and threat detection

• Threat intelligence integration

• Sentinel workspaces, data architecture and cost optimization

• Integration with Defender XDR and third-party security platforms

• Sentinel migration and modernization

• Microsoft Entra Security

• Microsoft Entra ID architecture

• Conditional Access

• MFA

• Privileged Identity Management (PIM)

• Identity Governance

• RBAC and least-privilege access

• Application identities and service principals

• Managed identities

• Identity Protection

• Zero Trust identity architecture

• Microsoft Purview

• Microsoft Purview Information Protection

• Data Classification and Sensitivity Labels

• Data Loss Prevention (DLP)

• Insider Risk Management

• Information Governance

• Data lifecycle and retention

• Data security and compliance architecture

• Integration of Purview with Microsoft 365 and security platforms

• Cloud Security / CNAPP

• Architect Microsoft Defender for Cloud across Azure and hybrid/multi-cloud environments.

• Design CSPM, CWPP and CNAPP security capabilities.

• Define cloud security posture management and security governance.

• Design workload protection for Azure VMs, containers, AKS and cloud services.

• Implement cloud security recommendations and risk remediation strategies.

• Design secure Azure landing zones and cloud security guardrails.

• Integrate cloud security findings with SIEM/SOC operations.

• Network Security

• Design secure Azure network architectures using:

• Azure Firewall

• Web Application Firewall

• Application Gateway

• Azure Front Door

• Network Security Groups

• Private Endpoints / Private Link

• VPN Gateway

• ExpressRoute

• Azure DDoS Protection

• Azure Virtual WAN

• Design network segmentation and Zero Trust architectures.

• Define secure connectivity between on-premises, Azure and other cloud platforms.

• Design secure architectures for internet-facing and internal workloads.

• Endpoint & Device Security

• Architect Microsoft Defender for Endpoint deployments at enterprise scale.

• Define endpoint security baselines and security controls.

• Design EDR/XDR capabilities and integration with SOC operations.

• Architect attack surface reduction, vulnerability management and endpoint protection.

• Integrate endpoint telemetry with Microsoft Sentinel and Defender XDR.

• Define security architecture for Windows, Linux, servers, VDI/AVD and other supported platforms.

• AI-Driven Process Automation

• Identify, assess and prioritize business processes suitable for AI-led automation based on value, feasibility, risk and expected return on investment.

• Design end-to-end intelligent automation solutions using Microsoft Foundry, Azure OpenAI, Foundry Agent Service, Azure AI services and Azure Machine Learning.

• Build and orchestrate AI agents and agent-driven workflows that can reason, retrieve enterprise knowledge, invoke approved tools and complete governed business actions.

• Integrate AI capabilities with Azure Logic Apps, Azure Functions, API Management, Event Grid, Service Bus and enterprise APIs to automate cross-system workflows.

• Use Microsoft Copilot Studio, Power Automate, Power Apps and AI Builder where low-code automation is appropriate, while defining enterprise architecture, security and governance guardrails.

• Design document and content automation using Azure Document Intelligence, Content Understanding, language, vision and speech services to classify, extract, summarize and route information.

• Develop RAG and knowledge-grounded automation using Azure AI Search, vector stores and approved enterprise data sources.

• Apply prompt engineering, structured output, function and tool calling, human-in-the-loop controls, exception handling and fallback patterns to improve automation reliability.

• Define monitoring and evaluation for AI automations, including accuracy, groundedness, latency, throughput, cost, security events, business outcomes and operational handover.

• Create reusable automation patterns, reference architectures and accelerators that support secure adoption across multiple business functions.

• AI & GenAI Security

• Design security architecture for Azure AI, Microsoft Foundry and Azure OpenAI workloads.

• Secure AI applications, models, APIs, agents and supporting infrastructure.

• Design security controls for RAG architectures, vector stores and enterprise data.

• Protect sensitive organizational data used by AI applications.

• Define identi