Sr. Staff Cyber Security Architect

Overview

Lead highly complex cybersecurity architecture projects requiring in-depth domain knowledge in two or more specialized areas, driving design and implementation of security across Linux, Kubernetes, application and cloud platforms.

What you'll do

• Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
• Partner with product management, product owners and architects to identify and prioritize security features across the system.
• Design and implement projects that transform products within the portfolio through automation and orchestration opportunities.
• Further the integration of Cyber Security and Risk management into the native development workflow.
• Contribute to the development of service-oriented infrastructure platforms with reusable components that can be orchestrated together for different businesses.
• Research and evaluate emerging technology, industry and market trends to assist in project development and/or operational support activities.
• Interact with functional leaders to support technical initiatives.

What you'll need

• Bachelor's Degree in Computer Science or STEM majors (Science, Technology, Engineering and Math) with significant experience in the Cybersecurity domain and a minimum of 14 years of experience.
• Deep experience in Linux and Kubernetes security, including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.
• Strong expertise in Identity, PKI and Zero Trust, including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak, OpenPKI and Vault.
• Strong knowledge of software supply-chain security, including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling.
• Experience designing DevSecOps and Security-as-Code, integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.
• Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.
• Experience with network, API and communication security, including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.
• Experience with runtime security, audit logging and security monitoring, preferably across Kubernetes and distributed edge systems.
• Ability to architect security across edge, customer datacenter and cloud deployments.
• Strong understanding of medical-device cybersecurity and secure product development, including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.

Nice to have

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions.
• Strong interpersonal skills, with an emphasis on the ability to effectively influence others.
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative and actionable manner.
• Hands-on architecture mindset, capable of building reusable security capabilities into the Compute Platform rather than relying only on governance, reviews and compliance processes.

Details

• Location: Bengaluru, India (EPIP 122 Phase II).
• Relocation assistance: not provided.