Cloud Platform Engineering - Azure Security, AVP

Overview

Lead strategic cloud security, identity and governance initiatives across enterprise-scale Azure environments as an Assistant Vice President in Cloud Platform Engineering. Drive cloud modernization, security transformation, governance automation and platform engineering while managing cloud platform, security and identity engineering teams.

What you'll do

• Define and execute enterprise identity and access management strategies leveraging Microsoft Entra ID.
• Lead Azure Identity Governance, Privileged Identity Management, Conditional Access, Identity Protection, Access Reviews and Zero Trust security controls.
• Drive adoption of Azure IAM best practices, RBAC models, least-privilege access, federated identity solutions and authentication services based on business decisions.
• Lead architecture and governance of Azure AD B2C / External Identity solutions for client-facing and partner-facing applications.
• Partner with security, risk, compliance and audit teams to ensure adherence to regulatory and security requirements.
• Define enterprise cloud governance frameworks using Azure Policy, Management Groups, Landing Zones and subscription governance models.
• Lead Policy-as-Code, Governance-as-Code and Security-as-Code capabilities.
• Establish automated compliance validation, remediation and continuous governance processes across Azure environments.
• Collaborate with architecture, security, application and infrastructure teams to define cloud standards and guardrails.
• Drive platform engineering initiatives focused on self-service capabilities, standardization, scalability and operational excellence.
• Champion automation-first engineering practices using Terraform, PowerShell, Python, GitHub Actions, Azure DevOps and other cloud-native tooling.
• Implement AI-driven solutions for engineering productivity, governance automation, operational efficiency, compliance monitoring and developer experience.
• Lead intelligent operational workflows using Generative AI, Copilot technologies and engineering automation frameworks.
• Collaborate with internal technology teams, enterprise architecture, cybersecurity, operations, product management and executive leadership.
• Partner with external clients, vendors and strategic partners to understand requirements and deliver secure cloud solutions.
• Influence and negotiate across stakeholder groups to align priorities, standards and platform roadmaps.
• Advise senior leaders on cloud strategy, identity modernization, security posture and governance transformation.
• Lead, mentor and develop cloud platform, security and identity engineers.
• Manage workforce planning, hiring, onboarding, performance management, compensation discussions, talent development, succession planning, promotions and retention strategies.
• Conduct year-end performance reviews, goal setting, career development planning and ongoing performance coaching.
• Foster accountability, collaboration, innovation and continuous improvement.
• Manage employee relations, conflict resolution, difficult conversations and stakeholder escalations.
• Provide executive-level reporting and updates to senior technology leadership, engineering leadership and business stakeholders.
• Build and maintain a high-performing engineering organization aligned with business priorities and strategic objectives.

What you'll need

• Bachelor's degree in Computer Science, Engineering, Information Technology or related discipline.
• 15-20 years of extensive experience in cloud security and identity management.
• 5+ years of direct people management experience leading Cloud engineering teams.
• Demonstrated experience managing year-end reviews, performance management processes, career development, employee mentoring and conflict resolution.
• Deep expertise in Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Identity Governance, Federation and SSO.
• Strong experience with Azure IAM, RBAC, Privileged Access models and Zero Trust architectures.
• Extensive experience with Azure Security services including Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, Security Center and Azure Monitor.
• Strong expertise implementing Azure Policy, Policy-as-Code, Governance-as-Code and enterprise cloud controls.
• Experience reporting platform health, risk, compliance, security and delivery metrics to executive leadership.
• Proven ability to manage complex stakeholder relationships across global organizations.
• Strong communication, presentation, influencing and leadership skills.

Nice to have

• Experience leading cloud transformation programs within large-scale financial services or regulated enterprise environments.
• Strong understanding of Azure Landing Zones, enterprise networking, hybrid connectivity and multi-cloud operating models.
• Strong experience developing infrastructure automation using Terraform, Bicep, PowerShell, Python and CI/CD platforms.
• Hands-on expertise with Azure AD B2C / External Identities and customer identity management solutions.
• Experience building platform engineering organizations and self-service cloud capabilities.
• Exposure to AI-assisted engineering, Generative AI platforms, Microsoft Copilot, agentic AI frameworks and automation-based operational models.
• Knowledge of NIST, ISO 27001, CIS, SOC2, PCI-DSS and financial industry compliance standards.
• Microsoft certifications such as Azure Solutions Architect Expert, Azure Security Engineer Expert, Microsoft Cybersecurity Architect Expert, Azure Administrator Expert or Identity and Access Administrator Associate.

Details

• Location: Hyderabad, India.