Solution Architect

**Description**:
**No of Vacancies**:

- 1

**Experience**:

- 5+ years

**Qualification**:

- B.Tech/ B.E./ MCA or higher in a related field

**Location**:

- Expected to travel and be stationed across various States in India as per project requirement.

**Skills/Requirements**:

- Expertise in configuring and managing firewalls, VPNs, IDS/IPS systems and security policies to protect internal networks.
- Strong understanding of encryption algorithms (AES, RSA, SSL/TLS) and key management strategies for ensuring data confidentiality and integrity.
- Proficiency in endpoint security solutions such as antivirus, EDR (Endpoint Detection and Response) and mobile device management.
- Expertise in IAM solutions, including role-based access control (RBAC), Multi-Factor Authentication (MFA), and Single Sign-On (SSO) protocols (e.g., LDAP, OAuth, SAML).
- Experience with SIEM tools (e.g., Splunk, LogRhythm, IBM QRadar) to monitor, detect, and respond to security events across systems.
- Knowledge of tools that monitor network and system activities for malicious activity or policy violations.
- Expertise in securing cloud environments by configuring identity and access management, encryption, and network security solutions specific to cloud platforms.
- Familiarity with cloud security solutions such as AWS Security Hub, Azure Security Center, and Google Cloud Security Command Center.
- Knowledge of industry regulations and standards (e.g., GDPR, HIPAA, PCI-DSS, SOC 2, ISO 27001), and the ability to design security systems that ensure compliance.
- Expertise in designing secure network architectures, including segmentation, firewalls, VPNs, and intrusion detection systems.
- In-depth understanding of network protocols such as TCP/IP, DNS, HTTP/HTTPS, IPsec, and SSL/TLS to secure data transmissions.
- Ability to design disaster recovery (DR) and business continuity plans (BCP) to minimize the impact of security incidents and ensure quick recovery.
- Knowledge of automating security processes using tools like Ansible, Terraform, and Puppet to implement continuous security throughout the development and deployment pipeline.
- Familiarity with embedding security practices into DevOps workflows, ensuring security controls are applied during the software development lifecycle (SDLC).

**Qualification**:

- B.Tech/ B.E./ MCA or higher in a related field.
- Any leading certification in IT security architect.
- At least 5 years of experience in solutioning of IT based security for large IT/ITeS projects in the role of security architect (projects in Government Sector/Public Sector/Private Sector).
- Fluency in English and Hindi (Speaking, reading & writing).

**Responsibilities**:
Security Architecture Design and Implementation:

- Develop, design, and implement comprehensive security architectures for the organization’s IT infrastructure, including networks, cloud systems and on-premises environments.
- Define security strategies, frameworks and roadmaps to ensure alignment with business objectives while minimizing security risks.

Risk Management and Threat Analysis:

- Conduct risk assessments to identify and evaluate potential vulnerabilities and threats in the organization's IT environment, both current and in future projects.
- Design and implement strategies to mitigate identified risks, including recommending appropriate security controls and technologies.

Security Policies and Compliance:

- Establish and enforce security policies, procedures, and standards based on industry best practices and regulatory requirements.
- Ensure that security solutions and architectures meet relevant regulatory and industry standards, such as GDPR, HIPAA, PCI-DSS, SOC 2, etc.
- Conduct periodic security audits and assessments to evaluate compliance with established security standards and policies. Implement continuous monitoring to detect anomalies and security breaches.

Security Infrastructure Management:

- Oversee the design and implementation of secure network architectures ensuring secure communication and data exchange both internally and externally.
- Develop and manage Identity Access Management frameworks to control user access to critical systems, ensuring appropriate authorization, authentication and auditing procedures are followed.
- Evaluate, deploy and maintain security tools such as firewalls, antivirus software, vulnerability management tools, encryption solutions, and security information and event management (SIEM) systems.

Incident Response and Recovery:

- Develop and implement an incident response plan to quickly address and mitigate the impact of security incidents or breaches.
- Act as a lead during security incidents, providing technical expertise and guidance on how to contain, investigate, and resolve security breaches.
- Ensure the organization has a disaster recovery and business continuity plan those accounts for security threats, providing a blueprint for maintaining essential operations during and afte