Brillio · 1 day ago
Security Architect- R01560184
Brillio is seeking a Senior Security Architect to own security remediation across a complex Azure ecosystem. The role involves leading vulnerability remediation, guiding engineering teams, and enhancing the client's overall security maturity through direct engagement with senior client leaders.
Artificial Intelligence (AI)Cloud ComputingEnterprise SoftwareConsultingBig DataAppsAnalyticsEnterprise ApplicationsMachine LearningMobile
Responsibilities
Lead vulnerability remediation across a wide set of Azure and hybrid platforms including: Azure VMs (Windows/Linux), AKS clusters, node pools, and container registries, App Services, Function Apps, Logic Apps, Storage Accounts, Databases, Key Vaults, Networking, Container images (ACR) and CI/CD pipelines
Review and guide fixes code-related vulnerabilities (SAST/DAST results, secrets, insecure dependencies)
Build detailed hardening guides covering OS, Azure services, Kubernetes, networks, and identity layers
Work closely with infra, DevOps, SRE, and app teams to implement hardening recommendations in a structured, repeatable way
Drive large-scale backlog remediation—prioritize issues, define workflows, and ensure real progress week over week
Provide industry-standard best practices to uplift the client’s overall security maturity, including cloud posture management, workload isolation, network security, identity hygiene, and governance
Host daily client calls to walk through status, blockers, upcoming remediation tasks, and architectural considerations
Document architecture gaps, remediation approaches, compliance alignment, and long-term improvement plans
Act as senior advisor and escalation point for all security remediation streams
Coach and mentor teams executing remediation to ensure consistency and quality
Qualification
Required
12–15+ years of combined experience in security architecture, cloud security, infrastructure security, or application security
Deep hands-on experience with Azure security across: Compute (VMs, VMSS), Containers (AKS, ACR), PaaS services (App Services, Function Apps, API Management), Identity & Access (Azure AD/Entra ID, Managed Identities, RBAC), Networking security (NSGs, ASGs, WAF, Private Endpoints, Firewall), Data security (Key Vault, Storage, SQL, CosmosDB), Defender for Cloud and Azure Policy
Strong exposure to Windows and Linux hardening
Ability to drive remediation across infrastructure, application layers, and cloud-native services
Strong architectural understanding of how vulnerabilities originate, how they propagate across cloud resources, and how to design long-term fixes
Experience resolving complex remediation backlogs in enterprise-scale environments
Excellent communication skills and confidence to lead daily discussions with senior client stakeholders
Strong documentation skills—ability to create clear hardening guides, runbooks, architectural diagrams, and remediation plans
Wiz (CSPM/CNAPP)
ServiceNow (ticketing, workflows, reporting)
Azure Portal, Azure CLI, ARM/Bicep familiarity
Linux (RHEL/Ubuntu) and Windows Server environments
Preferred
Certifications: CISSP, CCSP, AZ-500, AZ-305, CKA/CKS
Experience with IaC hardening (Terraform/Bicep) and DevSecOps practices
Background in threat modeling, architecture risk reviews, or cloud governance
Company
Brillio
Brillio is a technology consulting and technology services company focused on the implementation of digital technologies.
H1B Sponsorship
Brillio has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (258)
2024 (240)
2023 (281)
2022 (314)
2021 (196)
2020 (406)
Funding
Current Stage
Late StageTotal Funding
unknownKey Investors
The Orogen Group
2023-09-05Private Equity
2019-01-14Acquired
Recent News
Canada NewsWire
2026-01-14
Financial Express
2025-03-21
Company data provided by crunchbase