Security Architect

Security Architect

WAISL, On-Site, Bangalore, Full-time

About the Role

We are seeking a hands-on Security Architect to define, implement, and govern security architecture across a next-generation airport operations and intelligence platform. The role spans cloud-native, hybrid cloud + on-prem, OT/IoT, real-time streaming, AI/ML, and critical airport infrastructure environments. This is a technical role requiring practical architecture skills, not purely governance or compliance.

Key Responsibilities

Security Architecture & Platform Security

• Define enterprise security architecture for hybrid cloud, on-prem, and edge deployments
• Design secure architectures for Kubernetes platforms, event-driven streaming, data lakehouse, AI/ML workloads, and real-time systems
• Build zero-trust patterns; establish security reference architectures and standards
• Perform architecture reviews and threat modeling for new products and integrations

IAM, SSO & Access Governance

• Architect enterprise IAM using Keycloak, Microsoft Entra ID / Azure AD, OAuth2, OIDC, SAML, and JWT
• Design RBAC and multi-tenant isolation across data, API, UI, and streaming layers
• Define service-to-service authentication, secrets management, and certificate strategies

Cloud & Kubernetes Security

• Define security controls for AWS and Kubernetes: network segmentation, service mesh, API gateway, WAF, runtime security, container scanning, supply chain
• Establish DevSecOps pipelines and hardening standards for Kubernetes, APIs, databases, etc.

Data & Streaming Security

• Secure large-scale platforms built on Apache Kafka, Flink, Iceberg, and NiFi
• Define encryption, tokenization, data masking, PII protection, lineage, and secure multi-tenancy

OT / IoT / Airport Systems Security

• Design secure IT/OT/IoT integration patterns; secure SCADA, BMS, PLCs, OPC-UA, MQTT, and CCTV/VMS systems
• Define IEC 62443-aligned OT segmentation zones and secure edge ingestion architectures

Security Operations & Governance

• Define logging, monitoring, audit, and incident response architecture
• Support SIEM, SOC, IDS/IPS, and threat detection integration
• Conduct threat modeling, risk assessments, vulnerability remediation guidance, and compliance audits

Required Skills & Experience

Core Experience

• 10+ years in cybersecurity, platform security, or security architecture
• Strong hands-on experience in cloud-native and hybrid infrastructure security
• Experience in critical infrastructure, airports, or OT environments preferred

Technical Skills

Cloud & Infrastructure

• AWS/Azure security architecture
• Kubernetes & container security
• VPN and hybrid connectivity
• Linux hardening

Data & Streaming

• Kafka security
• Secure API architecture
• Data governance & encryption
• Real-time platform security

IAM & Identity

• Keycloak, Azure AD / Entra ID
• OAuth2 / OIDC / SAML
• RBAC / ABAC
• PKI & certificate management

OT/IoT Security

• IEC 62443
• SCADA / ICS security
• OT network segmentation
• Industrial protocols & gateways

DevSecOps & Tooling

Vault, Kong/API gateways, Wazuh/Falco/Zeek, Trivy, Prometheus/Grafana, ELK/OpenSearch, SIEM platforms

Good to Have

• Application, Cloud, System architecture experience
• Experience in airport, transportation, smart city, or critical infrastructure domains
• Exposure to AI/ML, Digital Twin, GIS, or operational intelligence platforms
• Knowledge of NIST, ISO 27001, CERT-In, and IEC 62443 frameworks

Qualifications

• Bachelor's or Master's in Computer Science, Cybersecurity, Information Security, or related field
• Preferred certifications: CISSP, CCSP, CISM, AWS Security Specialty, Kubernetes Security, IEC 62443

What We're Looking For

• Strong systems thinking

• Practical engineering mindset

• Bridge OT + IT + Cloud + Data + AI ecosystems

• Collaborative across architects, developers, DevOps, and customers

• Strong documentation skills

• Comfortable in fast-moving platform environments