Security Architect

Req ID: 377618

We are currently seeking a Security Architect to join our team in Bangalore, Karnātaka (IN-KA), India (IN).

Job Title / Role: GCP GKE Staff Engineer

We are currently seeking a Digital Engineering Lead Engineer to join our team in Bangalore, Karnātaka (IN-KA), India (IN).Job Description: Primary Skill: Professional Cloud Security Engineer Cloud-Infrastructure-Google Cloud Platform

Related experience: 5+ years of experience in cloud security engineering and automation

Total Experience: 8+ Years

Must have GCP Solution Architect Certification Professional Cloud Security Engineer

Mandatory Skills:Technical Qualification/ Knowledge:

This role supports operational security, control configuration, and secure design practices for GCP workloads. Roles Responsibilities Implement GCP security controls: IAM, VPC security, VPNs, KMS, Cloud Armor, and secure networking. Manage GCP identity and access, including SSO, MFA, and federated IDP configurations. Monitor workloads using Cloud Operations Suite and escalate anomalies. Conduct basic threat modelling, vulnerability scanning, and patching processes. Automate security audits and compliance controls using Terraform and Cloud Shell scripting. Assist architects in deploying and maintaining secure-by-default infrastructure. Support audit preparation, policy enforcement, and evidence gathering. Collaborate with cross-functional teams to resolve security alerts and

Expertise in assessment, designing and implementing GCP solutions including aspects like compute, network, storage, identity, security , DR/business continuity strategy, migration , templates , cost optimization, PowerShell , Ansible etc..

Should have prior experience in executing large complex cloud transformation programs including discovery, assessment , business case creation , design , build , migration planning and migration execution

Should have prior experience in using industry leading or native discovery, assessment and migration tools

Good knowledge on the cloud technology, different patterns, deployment methods, compatibility of the applications

Good knowledge on the GCP technologies and associated components and variations

Anthos Application Platform

Compute Engine , Compute Engine Managed Instance Groups , Kubernetes

Cloud Storage , Cloud Storage for Firebase , Persistant Disk , Local SSD , Filestore , Transfer Service

Virtual Private Network (VPC), Cloud DNS , Cloud Interconnect , Cloud VPN Gateway , Network Load Balancing , Global load balancing , Firewall rules , Cloud Armor

Cloud IAM , Resource Manager , Multi-factor Authentication , Cloud KMS

Cloud Billing , Cloud Console , Stackdriver

Cloud SQL, Cloud Spanner SQL, Cloud Bigtable

Cloud Run Container services, Kubernetes Engine (GKE) , Anthos Service Mesh , Cloud Functions , PowerShell on GCP

Solid understanding and experience in cloud computing based services architecture, technical design and implementations including IaaS, PaaS, and SaaS.

Design of clients Cloud environments with a focus on mainly on GCP and demonstrate Technical Cloud Architectural knowledge.

Playing a vital role in the design of production, staging, QA and development Cloud Infrastructures running in 24x7 environments.

Delivery of customer Cloud Strategies, aligned with customers business objectives and with a focus on Cloud Migrations and DR strategies

Nurture Cloud computing expertise internally and externally to drive Cloud Adoption

Should have a deep understanding of IaaS and PaaS services offered on cloud platforms and understand how to use them together to build complex solutions.

Ensure that all cloud solutions follow security and compliance controls, including data sovereignty.

Deliver cloud platform architecture documents detailing the vision for how GCP infrastructure and platform services support the overall application architecture, interaction with application, database and testing teams for providing a holistic view to the customer.

Collaborate with application architects and DevOps to modernize infrastructure as a service (IaaS) applications to Platform as a Service (PaaS)

Create solutions that support a DevOps approach for delivery and operations of services

Interact with and advise business representatives of the application regarding functional and non-functional requirements

Create proof-of-concepts to demonstrate viability of solutions under consideration

Develop enterprise level conceptual solutions and sponsor consensus/approval for global applications.

Have a working knowledge of other architecture disciplines including application, database, infrastructure, and enterprise architecture.

Identify and implement best practices, tools and standards

Provide consultative support to the DevOps team for production incidents

Drive and support system reliability, availability, scale, and performance activities

Evangelizes cloud automation and be a thought leader and expert defining standards for building and maintaining cloud platforms.

Knowledgeable about Configuration management such as Chef/Puppet/Ansible.

Automation skills using CLI scripting in any language (bash, perl, python, ruby, etc)

Ability to develop a robust design to meet customer business requirement with scalability, availability, performance and cost effectiveness using GCP offerings

Ability to identify and gather requirements to define an architectural solution which can be successfully built and operate on GCP

Ability to conclude high level and low level design for the GCP platform which may also include data center design as necessary

Capabilities to provide GCP operations and deployment guidance and best practices throughout the lifecycle of a project

Understanding the significance of the different metrics for monitoring, their threshold values and should be able to take necessary corrective measures based on the thresholds

Knowledge on automation to reduce the number of incidents or the repetitive incidents are preferred

Good knowledge on the cloud center operation, monitoring tools, backup solution

GKE

Set up monitoring and logging to troubleshoot a cluster, or debug a containerized application.

Manage Kubernetes Objects• Declarative and imperative paradigms for interacting with the Kubernetes API.• Managing Secrets

Managing confidential settings data using Secrets.

Configure load balancing, port forwarding, or setup firewall or DNS configurations to access applications in a cluster.

Configure networking for your cluster.

Hands-on experience with terraform. Ability to write reusable terraform modules.

Hands-on Python and Unix shell scripting is required.

understanding of CI/CD Pipelines in a globally distributed environment using Git, Artifactory, Jenkins, Docker registry.

Experience with GCP Services and writing cloud functions.

Hands-on experience deploying and managing Kubernetes infrastructure with Terraform Enterprise. Ability to write reusable terraform modules.

Certified Kubernetes Administrator (CKA) and/or Certified Kubernetes Application Developer (CKAD) is a plus

Experience using Docker within container orchestration platforms such as GKE.

Knowledge of setting up splunk

Knowledge of Spark in GKE

Process/ Quality Knowledge:

Must have clear knowledge on ITIL based service delivery

ITIL certification is desiredKnowledge on qualityKnowledge on security processes

Soft Skills:

Excellent communication skill and capability to work directly with global customers

Strong technical leadership skill to drive solutions

Focused on quality/cost/time of deliverables

Timely and accurate communication

Need to demonstrate the ownership for the technical issues and engage the right stakeholders for timely resolution.

Flexibility to learn and lead other technology areas like other public cloud technologies, private cloud, automation

Good reporting skill

Willing to work in different time zones as per project requirement

Good attitude to work in team and as individual contributor based on the project and situation

Focused, result oriented and self-motivating

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.