Zero Trust Architect

Role & responsibilities:

Job Description (JD)

Infrastructure Transformation & Zero Trust Architect

Experience: 4-6 Years
Location: Ahmedabad

Role Level: Consultant / Senior Consultant / Lead Engineer (based on experience)

About the Role

We are seeking a highly skilled Infrastructure Transformation & Zero Trust Architect to drive enterprise modernization initiatives focused on cloud adoption, identity transformation, network modernization, and security enhancement. The ideal candidate will have hands-on experience in designing and implementing Zero Trust Architecture (ZTA), Google Workspace environments, Active Directory modernization, and cloud-based identity solutions.

This role requires close collaboration with infrastructure, network, security, and business stakeholders to successfully execute transformation programs while ensuring compliance, resilience, and operational excellence.

Key Responsibilities

Infrastructure Transformation & Modernization

• Lead and support enterprise infrastructure modernization and transformation programs.
• Assess existing on-premises environments and define modernization roadmaps aligned with business objectives.
• Drive migrations from legacy/on-premises infrastructure to modern cloud platforms.
• Develop target-state architecture and implementation plans for cloud-first environments.

Zero Trust Architecture (ZTA)

• Design and implement Zero Trust Architecture (ZTA) strategies for Google Workspace (GWS) environments.
• Establish security controls based on least-privilege access, continuous verification, and identity-centric security models.
• Ensure transformation initiatives align with Zero Trust principles, industry standards, and compliance requirements.

Identity & Access Management

• Lead Active Directory modernization initiatives, transforming on-premises AD environments into modern cloud Identity Providers (IDPs).

• Implement and manage solutions such as:

• Google Credential Provider for Windows (GCPW)

• Microsoft Entra ID (Azure AD)

• Single Sign-On (SSO)

• Multi-Factor Authentication (MFA)

• Conditional Access Policies

• Define identity governance, access management, and lifecycle management processes.

Network & Endpoint Modernization

• Design secure, scalable, and highly available network architectures.
• Establish Zero Trust-based network design supporting global operations.
• Optimize connectivity between India delivery centers and US client environments.
• Drive endpoint modernization initiatives including device identity, endpoint compliance, and secure access controls.

Program Governance & Stakeholder Management

• Guide and support internal infrastructure, network, and security teams in planning and implementing configuration and architectural changes.
• Monitor project progress, risks, dependencies, and mitigation plans to ensure successful delivery.
• Serve as the primary liaison between business stakeholders, technology teams, vendors, and external partners.
• Provide regular program updates, executive reports, and risk assessments.

Business Continuity & Disaster Recovery

• Create, document, and maintain Business Continuity Plans (BCP) and Disaster Recovery (DR) strategies.
• Define and validate Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
• Conduct DR drills and business continuity testing exercises.
• Ensure critical business services meet availability and resiliency requirements.

Required Skills & Qualifications

Technical Skills

• Strong experience with Google Workspace (GWS) administration and security.

• Expertise in Zero Trust Architecture (ZTA) design and implementation.

• Experience with:

• Active Directory (AD) Migration

• Microsoft Entra ID (Azure AD)

• Google Credential Provider for Windows (GCPW)

• Identity and Access Management (IAM)

• SSO, MFA, Conditional Access

• Knowledge of cloud platforms such as Google Cloud Platform (GCP) and Microsoft Azure.

• Experience in network architecture design, WAN optimization, VPN technologies, and secure remote access.

• Understanding of endpoint security and device management solutions.

Project & Transformation Skills

• Experience leading infrastructure transformation and cloud migration projects.
• Ability to manage multiple workstreams, dependencies, risks, and stakeholders.
• Strong documentation, planning, and governance skills.
• Understanding of compliance and security frameworks.

Preferred Qualifications

• Certifications such as:

• Google Professional Cloud Architect

• Google Workspace Administrator

• Microsoft Certified: Identity and Access Administrator Associate

• Microsoft Certified: Azure Solutions Architect Expert

• CISSP, CCSP, or equivalent security certifications

• Experience in global delivery environments supporting geographically distributed teams.

• Exposure to enterprise BCP/DR planning and testing.