Senior Enterprise Security Architect

Overview

Senior Enterprise Security Architect (senior individual contributor) responsible for defining and driving enterprise security architecture strategy across AlphaSense corporate technology.

What you'll do

• Own and maintain the enterprise security architecture across Zero Trust, identity, network, endpoint, SaaS, infrastructure, mobile, and OT.
• Author and govern security architecture principles, reference designs, and technical standards.
• Identify architectural gaps and emerging threat vectors and prescribe remediation roadmaps.
• Provide architecture leadership for Zero Trust maturity, identity consolidation, SaaS governance, and device trust programs.
• Design Zero Trust/Device Trust architecture including network segmentation, ZTNA policy design, and enforcement.
• Architect identity and access across Okta, federation (SAML/OIDC), SCIM, MFA, PAM, and lifecycle governance.
• Establish SaaS/cloud security controls including vendor risk tiering, CASB/SSPM, and ongoing posture monitoring.

What you'll need

• 8+ years of information security experience with at least 4 years in security architecture, security engineering lead, or equivalent senior role.
• Expertise designing and implementing Zero Trust architectures including ZTNA, identity-aware access, and microsegmentation.
• Deep knowledge of identity and access management (Okta or equivalent, SAML, OIDC, SCIM, MFA, PAM, certificate-based authentication).
• Strong endpoint security architecture across macOS and Windows, including EDR (CrowdStrike Falcon) and MDM (Kandji/Intune).
• Experience architecting SaaS security programs including vendor risk frameworks and CASB/SSPM tooling with OAuth/API controls.
• Solid understanding of network security architecture (firewalls, SD-WAN, 802.1X, DNS security, segmentation).
• Proven ability to produce security architecture documentation including reference architectures, design patterns, and ADRs.

Nice to have

• Professional certifications such as CISSP, SABSA, CCSP, or equivalent.
• Familiarity with Cloudflare Access/WARP, Meraki, CrowdStrike Falcon, Kandji, Qualys VMDR, or Drata/GRC tooling.
• Experience designing AI governance and shadow SaaS controls for enterprise environments.
• Background supporting compliance frameworks (SOC 2, ISO 27001, FedRAMP).

Details

• Location: Pune.
• Reports to the VP of Secure IT.