Security Architect

Req ID: 326830

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Security Architect to join our team in Bangalore, Karnātaka (IN-KA), India (IN).

Job Title / Role: GCP & GKE Staff Engineer
NTT DATA Services strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Digital Engineering Lead Engineer to join our team in Bangalore, Karnātaka (IN-KA), India (IN).
Job Description:
Primary Skill: Professional Cloud Security Engineer & Cloud-Infrastructure-Google Cloud Platform
Related experience: 5+ years of experience in cloud security engineering and automation
Total Experience: 8+ Years
Must have GCP Solution Architect Certification & Professional Cloud Security Engineer

Mandatory Skills:
Technical Qualification/ Knowledge:
This role supports operational security, control configuration, and secure design practices for GCP workloads.
Roles & Responsibilities Implement GCP security controls:
IAM, VPC security, VPNs, KMS, Cloud Armor, and secure networking. Manage GCP identity and access, including SSO, MFA, and federated IDP configurations. Monitor workloads using Cloud Operations Suite and escalate anomalies. Conduct basic threat modelling, vulnerability scanning, and patching processes. Automate security audits and compliance controls using Terraform and Cloud Shell scripting. Assist architects in deploying and maintaining secure-by-default infrastructure. Support audit preparation, policy enforcement, and evidence gathering. Collaborate with cross-functional teams to resolve security alerts and
Expertise in assessment, designing and implementing GCP solutions including aspects like compute, network, storage, identity, security , DR/business continuity strategy, migration , templates , cost optimization, PowerShell , Ansible etc..
Should have prior experience in executing large complex cloud transformation programs including discovery, assessment , business case creation , design , build , migration planning and migration execution
Should have prior experience in using industry leading or native discovery, assessment and migration tools
Good knowledge on the cloud technology, different patterns, deployment methods, compatibility of the applications
Good knowledge on the GCP technologies and associated components and variations
Anthos Application Platform
Compute Engine , Compute Engine Managed Instance Groups , Kubernetes
Cloud Storage , Cloud Storage for Firebase , Persistant Disk , Local SSD , Filestore , Transfer Service
Virtual Private Network (VPC), Cloud DNS , Cloud Interconnect , Cloud VPN Gateway , Network Load Balancing , Global load balancing , Firewall rules , Cloud Armor
Cloud IAM , Resource Manager , Multi-factor Authentication , Cloud KMS
Cloud Billing , Cloud Console , Stackdriver
Cloud SQL, Cloud Spanner SQL, Cloud Bigtable
Cloud Run Container services, Kubernetes Engine (GKE) , Anthos Service Mesh , Cloud Functions , PowerShell on GCP
Solid understanding and experience in cloud computing based services architecture, technical design and implementations including IaaS, PaaS, and SaaS.
Design of clients Cloud environments with a focus on mainly on GCP and demonstrate Technical Cloud Architectural knowledge.
Playing a vital role in the design of production, staging, QA and development Cloud Infrastructures running in 24x7 environments.
Delivery of customer Cloud Strategies, aligned with customers business objectives and with a focus on Cloud Migrations and DR strategies
Nurture Cloud computing expertise internally and externally to drive Cloud Adoption
Should have a deep understanding of IaaS and PaaS services offered on cloud platforms and understand how to use them together to build complex solutions.
Ensure that all cloud solutions follow security and compliance controls, including data sovereignty.
Deliver cloud platform architecture documents detailing the vision for how GCP infrastructure and platform services support the overall application architecture, interaction with application, database and testing teams for providing a holistic view to the customer.
Collaborate with application architects and DevOps to modernize infrastructure as a service (IaaS) applications to Platform as a Service (PaaS)
Create solutions that support a DevOps approach for delivery and operations of services
Interact with and advise business representatives of the application regarding functional and non-functional requirements
Create proof-of-concepts to demonstrate viability of solutions under consideration
Develop enterprise level conceptual solutions and sponsor consensus/approval for global applications.
Have a working knowledge of other architecture disciplines including application, database, infrastructure, and enterprise architecture.
Identify and implement best practices, tools and standards
Provide consultative support to the DevOps team for production incidents
Drive and support system reliability, availability, scale, and performance activities
Evangelizes cloud automation and be a thought leader and expert defining standards for building and maintaining cloud platforms.
Knowledgeable about Configuration management such as Chef/Puppet/Ansible.
Automation skills using CLI scripting in any language (bash, perl, python, ruby, etc)
Ability to develop a robust design to meet customer business requirement with scalability, availability, performance and cost effectiveness using GCP offerings
Ability to identify and gather requirements to define an architectural solution which can be successfully built and operate on GCP
Ability to conclude high level and low level design for the GCP platform which may also include data center design as necessary
Capabilities to provide GCP operations and deployment guidance and best practices throughout the lifecycle of a project
Understanding the significance of the different metrics for monitoring, their threshold values and should be able to take necessary corrective measures based on the thresholds
Knowledge on automation to reduce the number of incidents or the repetitive incidents are preferred
Good knowledge on the cloud center operation, monitoring tools, backup solution

GKE

• Set up monitoring and logging to troubleshoot a cluster, or debug a containerized application.

• Manage Kubernetes Objects

• Declarative and imperative paradigms for interacting with the Kubernetes API.

• Managing Secrets

• Managing confidential settings data using Secrets.

• Configure load balancing, port forwarding, or setup firewall or DNS configurations to access applications in a cluster.

• Configure networking for your cluster.

• Hands-on experience with terraform. Ability to write reusable terraform modules.

• Hands-on Python and Unix shell scripting is required.

• understanding of CI/CD Pipelines in a globally distributed environment using Git, Artifactory, Jenkins, Docker registry.

• Experience with GCP Services and writing cloud functions.

• Hands-on experience deploying and managing Kubernetes infrastructure with Terraform Enterprise. Ability to write reusable terraform modules.

• Certified Kubernetes Administrator (CKA) and/or Certified Kubernetes Application Developer (CKAD) is a plus

• Experience using Docker within container orchestration platforms such as GKE.

• Knowledge of setting up splunk

• Knowledge of Spark in GKE

Process/ Quality Knowledge:
Must have clear knowledge on ITIL based service delivery
ITIL certification is desired
Knowledge on quality
Knowledge on security processes
Soft Skills:
Excellent communication skill and capability to work directly with global customers
Strong technical leadership skill to drive solutions
Focused on quality/cost/time of deliverables
Timely and accurate communication
Need to demonstrate the ownership for the technical issues and engage the right stakeholders for timely resolution.
Flexibility to learn and lead other technology areas like other public cloud technologies, private cloud, automation
Good reporting skill
Willing to work in different time zones as per project requirement
Good attitude to work in team and as individual contributor based on the project and situation
Focused, result oriented and self-motivating

About NTT DATA

NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at