Information Security Architect Full Time

Inviting applications for the role of Information Security Architect

Open for NCR , Bangalore , Hyderabad , Mumbai & Pune

Genpact is seeking Security Architect to support the design of information security systems and solutions that effectively balance business needs with cyber security requirements. design and govern security across enterprise compute – Server (Windows/Linux), identity, virtualization, and endpoint platforms in on‑prem, hybrid, and cloud environments

Responsibilities:

• Support design of information security systems and solutions that effectively balance business needs with cyber security requirements
• Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues
• Identify emerging security threats and accordingly, architect elements/controls which can mitigate such threats
• Ensure alignment of security controls, standards and frameworks with business and technology strategy
• Identify security design gaps in existing and proposed architectures and recommend suitable changes/enhancements
• Technical security assessments and configuration reviews of a broad range of solution components – Endpoint/server security, storage, backup & recovery, virtualizations and Identity and Access management platforms etc. and facilitate remediation/closure of findings
• Architect and secure Active Directory and Azure Entra ID (hybrid identity, MFA, Conditional Access)
• Define security architecture for Server (Windows/Linux) computing, VDI / VSI, and Citrix environments
• Lead endpoint security and MDM strategy using Microsoft Intune
• Design and manage Group Policy, security baselines, and configuration hardening
• Ensure secure DNS and DHCP architecture and services
• Drive identity, endpoint, and compute security governance, standards, and compliance
• Partner with Infrastructure, Cloud, and Risk teams on secure design and remediation

Qualifications

• Relevant Bachelor’s degree (or equivalent);

• 8+years of relevant experience

Preferred qualifications and experience

• Experience in security architecture, design and implementation of security solutions in on prem data center as well as cloud (Azure, AWS)
• Strong foundations on design of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements.
• Strong understanding of Information security concepts including authentication, authorization, ntlm/ldaps/oauth/OpenID/Kerberos/SAML, with experience on Identity and access management (IAM), Single Sign-On (SSO), Risk based authentication, multi-factor authentication technologies
• Good knowledge and experience of Active Directory design – GPO, DNS, DHCP,OS Hardening, remote access, operating system hardening for servers/client machines, PKI/certificate services, web security gateways, EDR, Enterprise mobility management (EMM), MDM and MAM etc.
• Strong knowledge of Security architecture, Zero trust concepts, Routing/ Switching, NAT/PAT, Access-Lists, DMZs, IPSEC VPN tunnels, firewall technologies (Cisco, PaloAlto, Checkpoint, Fortinet) etc.
• Security considerations of cloud computing: including data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks
• Understanding of NIST standards, ISO27001, COBIT, PCI-DSS etc.
• Security professional certifications such as CISSP, CISM, CISA, ISSAP, ISSEP, CEH etc.