{"id":2007658,"url":"https://alion.io/job/atos-azure-security-architect","title":"Azure Security Architect","company":{"id":3006,"name":"Atos","domain":"atos.net","url":"https://alion.io/company/atos","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":99,"open_postings":4,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":45000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Copilot","optional":false},{"name":"Copilot Studio","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DLP","optional":false},{"name":"Function Calling","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Incident Management","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"LLMOps","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"OpenAI","optional":false},{"name":"Power Apps","optional":false},{"name":"Power Automate","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Structured Outputs","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-09-12T02:01:00Z","employer_posted_date":"2026-09-12","last_verified_at":"2026-10-26T07:38:55Z","board_verified":true,"closed_at":null,"days_open":44,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":44},"description":"Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.\nWith more than 54,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.\nA trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.\nAbout Atos Group\nAtos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.\nWork Location- Mumbai/ Bangalore\nRole Overview\nWe are looking for an experienced Azure Security Architect to design and architect secure, resilient and scalable Microsoft Azure environments. The role will focus on Microsoft Security, Azure security architecture, identity, cloud security, SIEM/SOAR, endpoint security, data security and AI security.\nThe candidate will work with enterprise customers to assess security requirements, define security architecture, develop HLD/LLD, recommend Microsoft security solutions and provide technical leadership through implementation and operational transition.\nThe role also requires extensive hands-on experience in applying AI and GenAI technologies to automate and optimize enterprise processes. This includes designing secure Azure AI workloads using Microsoft Foundry and Azure OpenAI, building RAG solutions and AI agents, integrating intelligent automation with enterprise systems, and establishing appropriate data protection, responsible AI and operational controls.\nKey Responsibilities\nAzure Security Architecture\nDesign end-to-end security architecture for Microsoft Azure and hybrid cloud environments.\nDevelop security HLD/LLD, architecture diagrams, security controls and technical design documentation.\nConduct security assessments and identify architectural gaps, risks and improvement opportunities.\nDefine defense-in-depth, Zero Trust and security-by-design architecture.\nDesign security controls across identity, endpoint, network, application, data and cloud layers.\nDefine security architecture standards, patterns and reference architectures.\nProvide technical leadership during implementation, migration and transformation programmes.\nMicrosoft Security Architecture\nStrong experience architecting and integrating the Microsoft security ecosystem, including:\nMicrosoft Defender\nMicrosoft Defender for Endpoint (MDE / EDR)\nMicrosoft Defender for Servers\nMicrosoft Defender for Identity\nMicrosoft Defender for Office 365\nMicrosoft Defender for Cloud Apps (MDCA / CASB)\nMicrosoft Defender for Cloud\nMicrosoft Defender Vulnerability Management\nMicrosoft Defender XDR\nMicrosoft Defender for Cloud CSPM / CNAPP capabilities\nMicrosoft Sentinel\nMicrosoft Sentinel SIEM/SOAR architecture\nData connectors and log ingestion architecture\nAnalytics rules and detection engineering\nAutomation rules and Logic Apps\nPlaybooks and SOAR orchestration\nIncident management and investigation workflows\nUEBA and threat detection\nThreat intelligence integration\nSentinel workspaces, data architecture and cost optimization\nIntegration with Defender XDR and third-party security platforms\nSentinel migration and modernization\nMicrosoft Entra Security\nMicrosoft Entra ID architecture\nConditional Access\nMFA\nPrivileged Identity Management (PIM)\nIdentity Governance\nRBAC and least-privilege access\nApplication identities and service principals\nManaged identities\nIdentity Protection\nZero Trust identity architecture\nMicrosoft Purview\nMicrosoft Purview Information Protection\nData Classification and Sensitivity Labels\nData Loss Prevention (DLP)\nInsider Risk Management\nInformation Governance\nData lifecycle and retention\nData security and compliance architecture\nIntegration of Purview with Microsoft 365 and security platforms\nCloud Security / CNAPP\nArchitect Microsoft Defender for Cloud across Azure and hybrid/multi-cloud environments.\nDesign CSPM, CWPP and CNAPP security capabilities.\nDefine cloud security posture management and security governance.\nDesign workload protection for Azure VMs, containers, AKS and cloud services.\nImplement cloud security recommendations and risk remediation strategies.\nDesign secure Azure landing zones and cloud security guardrails.\nIntegrate cloud security findings with SIEM/SOC operations.\nNetwork Security\nDesign secure Azure network architectures using:\nAzure Firewall\nWeb Application Firewall\nApplication Gateway\nAzure Front Door\nNetwork Security Groups\nPrivate Endpoints / Private Link\nVPN Gateway\nExpressRoute\nAzure DDoS Protection\nAzure Virtual WAN\nDesign network segmentation and Zero Trust architectures.\nDefine secure connectivity between on-premises, Azure and other cloud platforms.\nDesign secure architectures for internet-facing and internal workloads.\nEndpoint & Device Security\nArchitect Microsoft Defender for Endpoint deployments at enterprise scale.\nDefine endpoint security baselines and security controls.\nDesign EDR/XDR capabilities and integration with SOC operations.\nArchitect attack surface reduction, vulnerability management and endpoint protection.\nIntegrate endpoint telemetry with Microsoft Sentinel and Defender XDR.\nDefine security architecture for Windows, Linux, servers, VDI/AVD and other supported platforms.\nAI-Driven Process Automation\nIdentify, assess and prioritize business processes suitable for AI-led automation based on value, feasibility, risk and expected return on investment.\nDesign end-to-end intelligent automation solutions using Microsoft Foundry, Azure OpenAI, Foundry Agent Service, Azure AI services and Azure Machine Learning.\nBuild and orchestrate AI agents and agent-driven workflows that can reason, retrieve enterprise knowledge, invoke approved tools and complete governed business actions.\nIntegrate AI capabilities with Azure Logic Apps, Azure Functions, API Management, Event Grid, Service Bus and enterprise APIs to automate cross-system workflows.\nUse Microsoft Copilot Studio, Power Automate, Power Apps and AI Builder where low-code automation is appropriate, while defining enterprise architecture, security and governance guardrails.\nDesign document and content automation using Azure Document Intelligence, Content Understanding, language, vision and speech services to classify, extract, summarize and route information.\nDevelop RAG and knowledge-grounded automation using Azure AI Search, vector stores and approved enterprise data sources.\nApply prompt engineering, structured output, function and tool calling, human-in-the-loop controls, exception handling and fallback patterns to improve automation reliability.\nDefine monitoring and evaluation for AI automations, including accuracy, groundedness, latency, throughput, cost, security events, business outcomes and operational handover.\nCreate reusable automation patterns, reference architectures and accelerators that support secure adoption across multiple business functions.\nAI & GenAI Security\nDesign security architecture for Azure AI, Microsoft Foundry and Azure OpenAI workloads.\nSecure AI applications, models, APIs, agents and supporting infrastructure.\nDesign security controls for RAG architectures, vector stores and enterprise data.\nProtect sensitive organizational data used by AI applications.\nDefine identity, RBAC, network isolation and private connectivity for AI workloads.\nAssess AI-specific threats including prompt injection, data leakage, excessive permissions and insecure AI agents.\nDefine AI security monitoring and integration with Microsoft Defender and Sentinel.\nApply responsible AI, privacy and governance principles.\nDesign controls for secure adoption of enterprise GenAI and Copilot solutions.\nSecurity Operations Integration\nDesign integration between Microsoft security platforms and SOC operations.\nDefine security event flows from Defender, Entra, Purview, Azure and third-party platforms into Sentinel.\nDefine alert prioritization, incident enrichment and automated response.\nArchitect SIEM/SOAR onboarding and operational workflows.\nDefine use-case architecture, detection strategy and security monitoring requirements.\nSupport SOC transformation, SIEM migration and security platform optimization.\nSecurity Governance & Compliance\nDefine security governance and control frameworks for Azure.\nMap technical controls relevant security and compliance requirements.\nDefine Azure Policy and security governance standards.\nSupport security risk assessments and architecture reviews.\nEnsure security designs comply with organizational security policies and regulatory requirements.\nDevelop security standards, reference architectures and reusable security patterns.\nRequired Technical Skills\nStrong experience in Azure Security Architecture.\nStrong understanding of Microsoft security ecosystem.\nHands-on architecture experience with Microsoft Defender, Sentinel, Entra ID and Purview.\nStrong knowledge of Zero Trust architecture.\nStrong Azure networking and cloud security knowledge.\nExperience with SIEM/SOAR and SOC integration.\nExperience designing enterprise-scale security solutions.\nStrong understanding of identity and access management.\nKnowledge of cloud security, CSPM/CNAPP and workload protection.\nExperience with security architecture documentation, HLD/LLD and design governance.\nStrong stakeholder and customer-facing communication skills.\nAI Automation Technical Skills\nExtensive hands-on experience delivering production-grade AI-powered process automation and measurable business outcomes.\nStrong architecture and development experience with Microsoft Foundry, Azure OpenAI, Foundry Agent Service and relevant Azure AI services.\nExperience developing AI agents, multi-agent workflows, tool integrations and knowledge-grounded solutions using RAG.\nProficiency in Python or C#, REST APIs, JSON, event-driven integration and Azure SDK-based solution development.\nExperience integrating AI solutions with Azure Logic Apps, Azure Functions, API Management, Service Bus, Event Grid and enterprise applications.\nPractical knowledge of Copilot Studio, Power Automate, Power Apps and AI Builder for governed low-code automation.\nStrong knowledge of prompt engineering, structured outputs, function calling, model selection, evaluation, guardrails and human-in-the-loop design.\nExperience with Azure AI Search, vector databases, document processing, content extraction and enterprise knowledge integration.\nUnderstanding of LLMOps/MLOps, CI/CD, model and prompt versioning, observability, performance optimization and AI cost management.\nAbility to assess automation opportunities, redesign processes, define success metrics and translate business requirements into secure technical architectures.\nAI Security Skills\nGenerative AI and LLM security fundamentals.\nAzure AI / Microsoft Foundry security architecture.\nAzure OpenAI security.\nRAG security and data protection.\nAI agent security and identity.\nPrompt injection and AI application security.\nAI data governance and privacy.\nAI security monitoring and threat detection.\nResponsible AI and AI governance.\nUnderstanding of emerging AI Security / AI-SPM concepts is an advantage.\nCertifications\nPreferred certificat...","description_format":"text","description_chars":13720,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Managed Security","Systems Integrators","High-Performance Computing"],"lifecycle":[{"event":"open","at":"2026-10-07T12:37:48Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.709,"p_room":0.28,"age_days":44,"expected_fill_days":19,"reasons":["conf:10","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/atos-azure-security-architect","json_url":"https://alion.io/job/atos-azure-security-architect.json","meta":{"generated_at":"2026-10-26T12:16:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16705,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3006},"rest":"https://alion.io/mcp/rest/get_company?id=3006"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatos-azure-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatos-azure-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatos-azure-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/atos-azure-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatos-azure-security-architect"}]}