Security Architect

Location: Bengaluru

Time Type: Full time

Job Description

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Amazon Web Services (AWS) Security
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
We are looking for an AWS IAM Engineer with experience to provide L2/L3 operational support across IAM, SSO, MFA, RBAC, and PAM services. The role requires strong troubleshooting skills, a sound understanding of AWS identity services, and the ability to manage access policies, handle incidents, and deliver clear operational reporting.

Roles & Responsibilities:
Operations and service delivery
-Handle incidents, service requests and change requests across the AWS security service portfolio, meeting agreed response and resolution service levels.
-Triage and action findings, alerts and policy violations, escalating to the client or to vendor support where required.
-Deliver planned changes within approved maintenance windows, including firewall and WAF rule changes, policy updates and configuration amendments.
-Produce daily operational reports and maintain runbooks, standard operating procedures and knowledge articles.
-Participate in problem management, contributing root cause analysis for major incidents within agreed timelines.
Technical ownership
-Administer AWS WAF rule groups and conditions, tune rules to reduce false positives and false negatives, and manage Firewall Manager security policies.
-Maintain AWS Config rules, including custom rules, organisation and organisational unit rules, and multi-account deployment.
-Operate AWS Security Hub, including central configuration policies, service integrations and findings workflow.
-Manage AWS GuardDuty findings and suppression rules, protection plans, runtime monitoring and cross-account aggregation.
-Administer AWS IAM roles, policies and permission boundaries perform access reviews, credential reporting and key rotation.
-Support AWS KMS and Secrets Manager operations, including key policy, rotation and access control.
-Maintain AWS CloudTrail configuration across accounts, including data events, retention and downstream log integrations.
-Operate AWS Shield Advanced and AWS Certificate Manager, including certificate lifecycle and renewal monitoring.
-Manage Palo Alto VM-Series firewalls deployed on AWS and maintain AWS Security Group rule sets.
Essential Skills and Experience
-AWS WAF — rule groups, conditions, rule tuning, Firewall Manager security policies.
-AWS Config — managed and custom rules, trigger and evaluation modes, organisation, OU and multi-account rules, configuration history and retention.
-AWS Security Hub — central configuration policies, integration with GuardDuty, Inspector and Macie, findings management.
-AWS GuardDuty — findings analysis, suppression rules, protection plans, cross-region and cross-account aggregation.
-AWS IAM — roles, policies, permission boundaries, Access Analyzer, credential reports, access key and secret key rotation.
-AWS KMS and AWS Secrets Manager — customer managed keys, symmetric and asymmetric encryption, key and secret rotation, access control.
-AWS CloudTrail — multi-account trails, data events, log retention and aggregation.
-AWS Shield Advanced and AWS Certificate Manager.
-AWS Security Groups and network security concepts in a VPC context.
-Working within an ITIL service management framework — incident, change and problem management, ideally on .
-Depth across AWS WAF, Config, Security Hub and IAM is the core requirement. Candidates with particular strength in identity and key management — IAM, federated identity, IAM Identity Center and KMS — should highlight this, as a subset of the positions is weighted that way.

Professional & Technical Skills:
-Federated identity with AWS — OIDC and SAML identity providers, IAM Identity Center including Active Directory integration.
-Automated remediation using EventBridge and Lambda.
-Infrastructure as code and scripting — Terraform, CloudFormation, Python or Boto3.
-Palo Alto VM-Series and Panorama on public cloud.
-AWS CloudHSM.
-Log and monitoring platforms — CloudWatch, Splunk, Dynatrace.
-Regulated industry experience, particularly life sciences or pharmaceutical, and familiarity with GxP or CIS benchmark controls.

Additional Information:
- The candidate should have minimum 6 years of experience in AWS Administration.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.