Information Security Architect at Aeries Technology · Bengaluru (Bangalore), Hyderabad · 10 - 15 years · ₹35L - ₹40L / yr · Profitable · Posted 14 Feb 2024

As an Enterprise Security Architect you will join a growing organization to lead a modern enterprise security program. In this role the Architect will have responsibility for identifying, defining, developing, leading security technology strategy across a broad portfolio of IAM, Cloud, End Point, Network, Web security and related technology systems, and the assessment of new and emerging identity technologies at the very large enterprise scale.
As a senior member of the team you will engage and partner with senior leaders across the organization leveraging your extensive background in (managing / delivering / implementing / architecting) security technology combined with expertise in organizational and cross-functional communication to develop strategy, influence roadmaps, solution adoption, champion strategic opportunities / execution plans with the aim to improve security capabilities, reduce risk and position forward looking identity governance and security enhancements
• Responsible for defining an architectural vision and architecture for large complex solutions, which aligns with the enterprise architecture strategy, technology and platform choices
• Describes the solution intent and the associated operating environment, determining the primary systems/subsystems and their interfaces, defining non-functional requirements and architectural runway to support new epics/features and expand into new opportunities
• Ensures the solution is fit for purpose and use by working with stakeholders, vendors/service providers, and evaluating the impact of strategic design decisions
• Contributes to best practices, standard templates, and the architecture roadmap for defined domains.
• Creates endpoint/host, workplace productivity security reference architecture and design patterns for reusability.
• Contributes in the creation of the architecture roadmap of defined domains (Business, Application, Data and Technology) in support of the product roadmap
• Contributes to the development of best practices including standardized templates
• Works across business and technology to create the solution intent and architectural vision for large complex solutions and evolves it based on an emerging backlog
• Works with Product Manager/Owner to plan and prioritize technology focused backlog items for the architecture runway to enable business epics/features and expand into new opportunities
• Clarifies the architecture for the development teams to support implementation, and provides solution options to resolve any architectural impediments
• Performs design and code reviews to ensure all non-functional requirements for a solution are sufficiently met (e.g. security, performance, maintainability, scalability, usability, and reliability)
• The platform security architect must interpret business, technology and threat drivers, and develop practical security roadmaps to deal with these drivers.
• Develop blueprints and procedures to effectively secure company data against accidental or unauthorized modification, destruction or disclosure.
• Create and define the security architectures and roadmaps encompassing cloud architecture, access management, and monitoring.
• Design and develop data security architectures for cloud and cloud/hybrid-based systems.
• Align architectural design technical controls and solutions to industry best practices and guidelines (e.g., NIST CSF, CSA, CIS, OWASP)
What are we looking for?
We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented, and are able to execute in a way that encourages creativity and continuous improvement.
Requirements:
• 10+ years of hands-on experience with scoping, sizing, designing, architecting & building IAM solutions across various technologies, or demonstrated ability to meet job requirements through comparable work experience.
• Expert level knowledge of authentication/authorization standards, protocols, and frameworks such as FIDO, OpenID, SAML, OAuth, JWT, CA, X.509, MTLS, etc.
• Technical expertise and experience with Microsoft MFA, SailPoint, CyberArk, ForgeRock, Okta, Ping, Active Directory, Azure Active Directory, AWS, Google Cloud Platform, Microsoft Azure, and IDM integration across domains
• Solid understanding of Cloud concepts and hands on knowledge on Azure/AD or other cloud identity environments.
• Experience designing and implementing security services and tools applied to GCP, Azure and AWS
• Expertise with Data Loss Prevention and CASB strategies and solutions supporting security of critical SaaS solutions such as Office 365, etc.
• Experience with Hybrid cloud architectures and designs
• Must have experience with Internet Application Hosting architectures, best practices and related technologies to effectively protect externally facing applications
• Experience with DevSecOps process, Container technologies (Docker, Kubernetes), API Gateways, and other common web application technologies is preferred
• Strong knowledge of enterprise security concepts/frameworks and products, secure design principles and best practices
• Strong verbal and writing skills to develop technical documentation and presentations
• Experience in leading technical architecture and security design discussions
• Experience managing multiple multi-level stakeholder relationships
• Bachelors in Computer Science, Computer Engineering or related field
“Such other task that Company may assign you time to time”.

About Aeries Technology
About
ATG is a Global Business Services (GBS) company offering outsourcing solutions, business process management, and technological advancements to organizations seeking higher operational effectiveness, greater flexibility, and cost savings. We help create a virtual extension of our clients’ enterprise with an operational framework which is simple, flexible and resilient. ATG enables its clients to extend current capabilities and build value-added services by providing global access to resources and diverse skill sets, including best practices in multiple processes and technology domains. Our services are designed to aid businesses improve their operational efficiencies, performance and reduce costs.
Candid answers by the company
Aeries Technology (Nasdaq: AERT) is a global consulting and professional services firm that partners with businesses undergoing transformation, including private equity firms and their portfolio companies. Established in 2012, the company offers customized solutions that blend industry-specific expertise, functional know-how, and cutting-edge digital technologies to help clients scale, streamline, and transform their operations. With a team of over 1,600 professionals, Aeries specializes in Technology Services, Business Process Management, and Digital Transformation. Its people-first approach and commitment to excellence have earned it recognition as a Great Place to Work.
Similar jobs (10)
About the Role
We are looking for a Solution Architect with 10–15 years of experience to design scalable, secure, and cloud-ready solutions. The role involves working with customers, Senior Solution Architects, business analysts, project managers, and engineering teams across cloud, modernization, microservices, integration, and digital transformation initiatives.
Must Have Skills
- 10–15 years of experience in software development, architecture, and enterprise application delivery.
- Strong experience with Azure and/or AWS and cloud-native architecture.
- Hands-on experience with Microservices, REST APIs, SOA, and system integration.
- Experience in application modernization and cloud migration.
- Knowledge of Docker, Kubernetes, CI/CD, and Infrastructure as Code.
- Understanding of cloud security, IAM, networking, monitoring, and disaster recovery.
- Ability to create architecture diagrams, solution designs, and technical documentation.
- Strong analytical, communication, and customer-facing skills.
Good To Have Skills
- AWS/Azure certifications.
- Experience with Serverless, Event-Driven Architecture, Messaging, and API Management.
- Exposure to SaaS / Multi-Tenant Architecture.
- Knowledge of Generative AI and AI-enabled solutions.
- Experience with pre-sales, POCs, estimations, and technical proposals.
- Exposure to application security and compliance.
- Experience working with global customers and distributed teams.
Responsibilities
- Design end-to-end solutions and independently own defined architecture workstreams.
- Translate business and technical requirements into application, cloud, integration, and deployment designs.
- Define microservice, API, integration, and data-flow architectures.
- Guide engineering teams on architecture implementation and conduct design/code reviews.
- Contribute to cloud migration, modernization, and digital transformation initiatives.
- Participate in customer workshops, technical discussions, POCs, and solution demonstrations.
- Identify and address architectural, performance, security, and technical risks.
- Ensure solutions follow defined architecture, security, and engineering standards.
- Work closely with the Senior Solution Architect on complex and strategic engagements.
- Develop reusable architecture patterns, templates, and technical accelerators
Next
Job Title: Chief Manager – IT Infrastructure & Security
Location: Gurgaon
Experience: 12+ year in same
Qualification: B.Tech/MCA
Preferred Certifications: Palo Alto PCCSE, CyberArk, Nutanix NCP, VMware VCP, CCNP.
Must have exp in Server, network, firewall, edr, virtualization system (vm-ware, dutanix)
Technical Experience Required:
- AWS (Amazon Web Services) and/or Microsoft Azure
- VMware ESX / ESXi
- Windows Server
- Active Directory (AD)
- Kaseya
- DNS & DHCP
- Forcepoint / Websense
- Kaspersky AV
- Cisco networking
- SAN (Storage Area Network)
- Core Networking Tech: VoIP (Voice over IP), VPN (Virtual Private Network), TCP/IP, WAN/LAN/WLAN routing, and switching protocols.
Key Deliverables
Infrastructure Architecture & Operations
- Own the scoping, architecture and design of new infrastructure that will support the business.
- Administer HP Infrastructure, Nutanix HCI, Dell VxRail, VMware, Windows and Linux environments.
- Architect, monitor and maintain Active Directory services, File Services, Server Infrastructure and WAN/LAN/WLAN supporting business-critical systems.
- Be responsible for server, storage, network, security and monitoring hardware, software and services, ensuring they are optimised for availability, stability, integrity, performance and scalability.
- Forecast demand for storage, computing and network capacity, and take appropriate action before capacity limits are reached.
- Maintain IT hardware and software — including servers, peripherals, network nodes, terminals and wiring — manage equipment inventory and the hardware life cycle.
Network & End-User Computing
- Manage LAN/WAN, VPN, Cisco routing/switching and Cisco Meraki WiFi environments.
- Troubleshoot and quickly resolve network issues.
- Oversee end-user computing — laptops, desktops, printers, AV devices, iOS devices/iPad, MDM and endpoint management — and end-user support operations across Head Office, Stores and Warehouse. Security, Identity & Compliance
- Manage Palo Alto firewalls, SentinelOne EDR/XDR, CyberArk PAM, GTB DLP and Forcepoint/ForceScout security platforms.
- Perform regular security monitoring to identify any possible intrusions.
- Manage certificate/PKI and domain/DNS services, including issuance, renewal, rotation and revocation.
- Establish and maintain corporate IT infrastructure standards for configuration and security.
- Ensure IT governance, audit and compliance requirements are met.
Continuity, Backup & Performance
- Define, implement, test and maintain data back-up and recovery protocols to ensure availability.
- Drive business continuity, backup, disaster recovery and infrastructure modernisation projects.
- Be accountable for measuring and optimising application and infrastructure performance, and lead recovery actions after system failures.
- Monitor and maintain infrastructure stability against defined KPIs.
Leadership, Vendor & Governance
- Provide support to, manage and train the IT Infrastructure team.
- Manage vendor relationships, budgets, SLAs and team performance.
- Project-plan with clear and concise communication methods.
- Prepare and maintain documentation of the IT infrastructure.
Additional Technical Competencies
The candidate must have experience in one or more of the following areas:
Network & Infrastructure Engineering
- Proficient understanding of IP networking: Cisco, TCP/IP, Window Server, Network Security, Cloud Servers that includes technical and functional understanding of network security, VOIP, WAN, LAN, and internet routing and switching protocols, wireless and VPN capabilities.
- Demonstrated Data Center/Server Room build out experience (Power, Network, Cooling, etc...).
- Expertise in VMware ESX, SAN, Monitoring tools, and Operating Systems (strong understanding of Windows).
- Experience in managing VMware environment.
- Experience in managing cloud-based infrastructure like AWS/Azure.
- Expertise in windows environment in domain/Forrest/DNS/DHCP. System Administration & Maintenance
- Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
- Use of system management tool Kaseya and development of new scripts in this tool for deployment of policies.
- Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.
- Manage processes to Create, change, and delete user accounts per request from HR.
- Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.
Security, Backups & Data Protection
- Skilled in managing websense/forcepoint DLP/Web security.
- Experience in managing Kaspersky antivirus system.
- Perform regular security monitoring to identify any possible intrusions.
- Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.
- Closely monitoring and developing the procedures for backups of the servers.
- Perform regular file archival and purge as necessary.
Monitoring, Testing & Troubleshooting
- Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
- Daily monitor the Server Event Logs, Firewall and other security equipment logs and also the logs of scheduled archival software.
- Test the operating system software, the networking software and also the computer hardware.
- Must possess the initiative to resolve issues before they become critical.
Project Management & Documentation
- To assist IT Head for technical issues on various projects such as support on testing, rolling out and execution of projects.
- Strong written communication skills including documentation.
mail updated resume with salary details-
email: etalenthire[at]gmail[dot]com
satish: 88O 27 49 743
About the Role
We are looking for an experienced Solution Architect / Technical Lead to lead solution architecture, system integrations, and Azure platform design for a Visitor Management System project in Abu Dhabi.
The ideal candidate will have 10+ years of experience in software projects, strong expertise in Microsoft Azure, solution architecture, integrations, and enterprise application design, along with the ability to lead technical teams and stakeholders.
Key Responsibilities
- Lead the overall solution architecture and technical design of the Visitor Management System.
- Design and implement scalable, secure, and high-performing solutions on Microsoft Azure.
- Define Azure cloud architecture, infrastructure components, networking, security, and deployment strategies.
- Lead integration architecture between the Visitor Management System and external/enterprise applications.
- Design and oversee APIs, web services, and system integrations.
- Provide technical leadership throughout the software development lifecycle.
- Review existing systems and recommend improvements in architecture, scalability, performance, and security.
- Prepare technical architecture documents, solution designs, integration specifications, and technical documentation.
- Work closely with development, infrastructure, security, and project management teams.
- Troubleshoot complex technical and architectural issues and provide effective solutions.
- Ensure solutions follow enterprise architecture, security, and coding best practices.
- Participate in technical discussions with clients and stakeholders and translate business requirements into technical solutions.
- Mentor and guide technical teams on architecture and implementation.
Required Technical Skills
- Strong experience in Solution Architecture / Technical Architecture
- Strong hands-on experience with Microsoft Azure
- Azure platform and cloud architecture
- Azure services, infrastructure, networking, and security
- API and system integration
- REST APIs / Web Services
- Microservices and distributed application architecture
- Enterprise application architecture
- Database architecture and SQL
- Azure DevOps / CI-CD
- Identity & Access Management / Microsoft Entra ID
- Cloud security, scalability, performance, and high availability
- Software development lifecycle and Agile methodologies
Required Experience
- 10+ years of experience in software projects
- Proven experience as a Solution Architect, Azure Architect, Technical Architect, or Technical Lead
- Strong experience designing and implementing enterprise-level software solutions
- Experience leading technical teams and working with multiple stakeholders
- Experience with Azure-based architecture and integrations
- Experience in visitor management, access control, security systems, or similar enterprise systems will be an advantage
Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)
Company: Inflow Technologies
Location: Bangalore (Work From Office, 5 days/week)
About Inflow Technologies:
Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.
Position Overview:
We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.
Key Responsibilities:
Implementation & Deployment
- Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
- Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
- Perform agent rollout across Windows, Mac, and Mobile
Architecture & Design
- Design a secure access architecture for remote users, branch offices, and cloud workloads
- Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
- Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
- Configure SSO/SAML authentication
Required Qualifications:
- Bachelor's degree in IT/CS or related field
- 6–8 years of experience (L3 level)
- Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)
Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)
A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.
Key Responsibilities
- Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
- Conduct vulnerability assessments, penetration testing, and risk analysis.
- Monitor and respond to security incidents, ensuring timely resolution and documentation.
- Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
- Collaborate with IT and business teams to integrate security into system architecture and processes.
- Lead incident response drills and disaster recovery planning.
- Provide guidance and mentorship to junior cybersecurity staff.
- Stay updated on emerging threats, tools, and technologies.
Qualifications
- Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
- 5–10 years of proven experience in cybersecurity engineering or related roles.
- Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
- Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
- Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.
Skills
- Advanced problem-solving and analytical skills.
- Strong communication and leadership abilities.
- Ability to manage complex projects and handle escalations effectively.
- Proactive mindset with adaptability to evolving cyber threats.
Position
Solution Architect/Technical Architect
Experience
· 12 - 16+ years of overall IT experience
· Significant hands-on experience working as a Solution/Technical Architect
Education
· B.Tech / M.Tech / MCA / MBA or equivalent
Certifications
· TOGAF® certification (Level 1/2) preferred to ensure alignment with enterprise architecture standards
· Microsoft Certified: Azure Solutions Architect Expert (AZ-305) and other supporting certifications such as AZ-104, AZ-400, or AZ-500 preferred.
Key Responsibilities
· Define and evolve the target architecture for .NET-based distributed platform.
· Architect highly configurable solutions on Azure with strong focus on scalability, tenant isolation, resilience, maintainability, and speed of delivery.
· Lead solution design across ASP.NET Core services, REST APIs, event-driven workflows, background processing, integration patterns, and shared platform capabilities.
· Drive adoption of modern .NET and cloud-native patterns including microservices, domain-driven design, event-driven architecture, API-first design, and secure service-to-service communication.
· Partner with engineering teams on real implementation decisions, review critical designs and code paths, and provide hands-on guidance for performance, operability, and production readiness.
· Architect Azure-native deployment patterns using AKS, containers, API Management, Service Bus/Event Grid or equivalent messaging, Key Vault, managed observability, and CI/CD automation.
· Work with data and platform teams on PostgreSQL-backed service design, data access patterns, caching strategies, and database performance for high-volume transactional workloads.
· Define non-functional requirements and architecture guardrails around performance, scalability, availability, recoverability, security, compliance, and cost efficiency.
· Embed DevSecOps and observability into platform design through telemetry, tracing, alerting, diagnostics, secrets management, and release governance.
· Evaluate emerging technologies, AI-assisted engineering enablers, and modernization options pragmatically, with clear build-vs-buy and risk-reward trade-offs.
· Mentor senior engineers and technical leads, contribute to architectural governance, and create reusable patterns, reference implementations, and standards across teams.
· Bachelor’s or master’s degree in computer science, Engineering, or a related field.
· 12–16 years of experience in software engineering, solution architecture, or platform engineering, with significant experience in Microsoft technology stacks.
Essential Qualification and Skills
· Strong hands-on expertise in C#, .NET / .NET Core / .NET 8, ASP.NET Core, Web APIs, background services, and enterprise application design.
· Deep experience in architecting distributed systems using microservices, asynchronous messaging, event-driven design, and API-led integration patterns.
· Strong Azure architecture experience, preferably across AKS, App Services, Functions, API Management, Key Vault, Service Bus, Event Grid, Storage, monitoring, and identity integration patterns.
· Experience designing and supporting platforms, configurable product architectures, and integration-heavy enterprise solutions.
· Strong understanding of relational databases and performance engineering, especially SQL Server and/or PostgreSQL, including schema design, indexing, query tuning, and transaction handling.
· Solid grasp of non-functional architecture including performance, scalability, availability, fault isolation, observability, and disaster recovery.
· Strong understanding of application and platform security including authentication, authorization, secrets management, encryption, secure coding, and compliance-oriented design.
· Experience with containers, Kubernetes, CI/CD, infrastructure automation, and modern DevSecOps practices.
· Ability to make sound architecture decisions with a balance of pragmatism, delivery speed, engineering quality, and long-term maintainability.
· Strong communication and stakeholder management skills across product, engineering, architecture, operations, security, and client-facing teams.
Skills & Competencies
· Experience in insurance, Insurtech, BFSI, or other regulated, transaction-heavy domains.
· Exposure to policy administration, billing, accounting, claims, workflow orchestration, or reporting platforms within the insurance value chain.
· Experience with architecture frameworks and modelling approaches such as TOGAF, domain-driven design, UML, C4, or equivalent practical architecture methods.
· Familiarity with mixed technology landscapes involving .NET, Java/Spring Boot, enterprise workflow tools, and integration ecosystems.
· Experience with observability and reliability tooling such as Datadog, Dynatrace, Application Insights, Open Telemetry, Grafana, or similar.
· Working knowledge of Angular, React, or modern web application architecture patterns.
· Exposure to AI-enabled engineering, intelligent automation, or embedding AI capabilities into enterprise platforms.
· Leadership experience across globally distributed or virtual teams.
Position Summary
We are looking for an experienced Enterprise Architect to define and deliver enterprise-scale digital experience architectures leveraging AI/ML capabilities, data platforms, and modern cloud technologies. The role involves partnering with senior business and technology stakeholders to translate business objectives into scalable architectures, strategic roadmaps, and technology solutions.
The ideal candidate will have strong expertise in enterprise architecture, cloud-native technologies, AI-driven customer experiences, and digital marketing platforms, along with the ability to lead architecture initiatives across cross-functional teams.
Key Responsibilities
- Enterprise Strategy & Roadmaps: Define digital, data, and AI strategies, translating business vision into actionable architecture roadmaps aligned with business goals and KPIs.
- Architecture Design: Design end-to-end enterprise and solution architectures integrating digital experience platforms, customer data platforms, AI/ML capabilities, and cloud services.
- Cloud & Technology Architecture: Recommend scalable, secure, and resilient architectures using cloud-native, API-first, microservices, event-driven, and serverless principles across Azure, AWS, or other public cloud platforms.
- AI & Data Architecture: Define architectures for customer data platforms, identity and profile management, data ingestion, governance, personalization, journey orchestration, and AI-powered experiences.
- Architecture Governance: Establish architecture standards, reference architectures, governance frameworks, and operating models to ensure consistency, security, and sustainable technology adoption.
- Stakeholder Management: Collaborate with business leaders, engineering teams, data architects, developers, and data scientists to drive architecture alignment and execution.
- Executive Communication: Lead architecture workshops, visioning sessions, and roadmap presentations, communicating technical recommendations and trade-offs to senior leadership.
- Practice Development: Contribute to reusable architecture assets, mentor architects and consultants, and support presales activities, solutioning, estimations, and proposals.
Required Skills & Experience
- Proven experience in enterprise architecture, solution architecture, and developing enterprise architecture models and roadmaps.
- Strong understanding of architecture frameworks and principles, including TOGAF, SOA, and API-led architecture.
- Hands-on experience with public cloud architecture and services, particularly Microsoft Azure and/or AWS.
- Experience designing and integrating AI-powered solutions, with knowledge of LLMs, prompt engineering, RAG, and model evaluation.
- Understanding of agentic workflows, tool-using agents, and enterprise AI governance, observability, and reliability.
- Experience working with software engineers, application developers, data architects, and data science/ML teams to deliver end-to-end solutions.
- Ability to translate business requirements and strategic vision into technical architectures and implementation roadmaps.
- Strong stakeholder management, leadership, presentation, and communication skills, including experience engaging with senior executives.
- Ability to lead architecture execution across multidisciplinary teams and communicate complex technical concepts to diverse audiences.
Good to Have
- Experience with Adobe Experience Cloud, Adobe Experience Platform, or one or more digital experience solutions.
- Previous experience with other digital marketing and customer experience platforms.
- Experience with customer data platforms, personalization, omnichannel engagement, and marketing optimization initiatives.
- Experience supporting consulting engagements, presales, and enterprise transformation initiatives.
Additional Requirement
- Willingness to travel up to 50%, depending on business and client requirements.
Job Description:
Lead regional transformation programs, driving the entire solution architecture lifecycle,
from conceptualization to execution, with a focus on agile and DevOps practices.
Accountable for leading the IT Architecture for all projects and programs, focusing on
innovative business and IT solutions in the insurance domain, such as new-age digital
platforms, cloud-native applications, AI/ML-powered decision-making, and data-driven
insights.
Preferred skills
• Demonstrated expertise in developing cloud-native, microservices-based, and API
driven insurance solutions, leveraging modern architectural patterns and emerging
technologies such as AI/ML, big data, and IoT.
• Thorough understanding of common patterns, frameworks, and reference
architectures for the Insurance domain, with a focus on digital transformation and
innovation.
• Proven experience in leading regional transformation programs, driving the adoption
of agile and DevOps practices.
• Asia regional experience is an advantage.
Qualifications
Minimum Bachelor's degree, preferably with a Master's degree in Computer Science,
Engineering, or a related discipline.
• 15+ years of IT experience, with a minimum of 7+ years in the insurance industry,
focusing on the application of emerging technologies.
Senior Network Security Engineer – ZTNA (Zscaler, Axis/HPE SSE Focus)
• ZTNA and Zero Trust Implementation: The role involves architecting and deploying ZTNA solutions using platforms like Zscaler and Axis Security, replacing traditional VPNs with identity-aware access, enforcing least-privilege models based on user identity, device posture, and application context, and integrating with identity providers and security tools to secure remote workforces and third parties. Migration from VPN to ZTNA is a key responsibility.
• Network Security Architecture and Operations: The engineer participates in architecture reviews, designs secure environments across data centers, cloud, and edge, provides risk and telemetry analysis, supports audits and compliance, manages SIEM systems, and collaborates with global cybersecurity and infrastructure teams to maintain security posture.
• Technical Expertise and Qualifications: Required qualifications include over 10 years of experience in network security engineering, hands-on expertise with Zscaler (ZIA, ZPA), Axis Security/Aruba SSE, deep knowledge of Zero Trust, SASE frameworks, firewall and proxy technologies, identity integration, cloud security across AWS, Azure, and GCP, and certifications such as CCNP, CCIE, Zscaler certifications, and CISSP or CISM.
• Role Focus and Strategic Importance: The position emphasizes transitioning from traditional network security to identity-driven access security, positioning ZTNA as a core transformation pillar replacing VPNs, aligning with enterprise Zero Trust initiatives, enabling secure hybrid workforces, and balancing expertise in both modern cloud security platforms and traditional network controls.
Job Title
Solution Architect — Building an In‑House Payment Investigation Platform
Role purpose
Design and lead the delivery of an in‑house platform that supports end‑to‑end payment investigations (exceptions, recalls/returns, claims, enquiries, tracking, evidence and audit), integrating with payment processing, case management, messaging networks and customer channels. You’ll shape the target architecture, drive engineering alignment, and ensure the platform is secure, resilient, compliant and operable at scale.
Key responsibilities
Architecture & solution design
- Own end‑to‑end solution architecture across channels, APIs, workflow/case services, data, integration and observability.
- Define target state architecture and transition roadmap (strangler patterns, incremental migration from legacy/manual processes).
- Produce architecture artefacts: HLD/LLD inputs, C4 diagrams, data flow diagrams, sequence flows, NFRs, runbooks, ADRs.
- Design investigation workflows: triage, assignment, SLA timers, evidence capture, maker/checker controls, decisioning and closure.
- Establish canonical data models for investigation cases, events, payment references, counterparties and communications.
Integration & payments domain
- Architect integrations with payment rails and services (e.g., SWIFT, CHAPS/Faster Payments, SEPA, RTP equivalents depending on market), gateways and core banking/payment hubs.
- Design inbound/outbound messaging patterns for investigations: status requests, recalls, return handling, charge/claim processes, correspondence.
- Ensure idempotency, correlation (end‑to‑end trace IDs), retries, dead‑lettering and reconciliation for all investigation flows.
- Define event-driven patterns (pub/sub) and API contracts for upstream/downstream teams.
Non‑functional requirements (NFRs)
- Drive NFRs covering resilience (active-active where required), availability, latency, throughput, disaster recovery, and capacity planning.
- Ensure strong security architecture: threat modelling, IAM, RBAC/ABAC, privileged access, secrets management, encryption in transit/at rest.
- Design for auditability and compliance: immutable logs, evidential storage, full case history, segregation of duties, retention policies.
- Embed observability: metrics, logs, traces, SLOs/SLIs, alerting, incident playbooks.
Delivery leadership
- Partner with Product Owners, Engineering Leads, Ops/SRE, InfoSec, Risk/Compliance, and business SMEs to align scope and priorities.
- Provide architectural governance: design reviews, standards, guardrails, and technical decision facilitation.
- Mentor squads on patterns (API design, eventing, data, resilience) and unblock delivery through pragmatic trade-offs.
- Support vendor/product evaluation when needed (BPM/workflow, rules engines, document/evidence stores).
Data & analytics
- Define data strategy for operational reporting, MI and regulatory reporting (case volumes, SLA breaches, root-cause categories).
- Architect data lineage and quality controls; define golden source for investigation outcomes.
- Support analytics for proactive issue detection (e.g., recurring breaks, correspondent issues, fraud signals where applicable).
Typical deliverables
- Target architecture + phased migration plan
- NFR catalogue and platform guardrails
- Integration patterns and API/event contract standards
- Event Driven Integration
- Operational readiness: monitoring, runbooks, DR plans, support model
- Architecture Decision Records (ADRs)
Required skills & experience
- Proven Solution Architect experience delivering mission-critical platforms in banking/financial services.
- Strong payments domain knowledge: investigation lifecycles, recalls/returns, exceptions handling, payment references and reconciliation.
- Integration expertise: APIs (REST/gRPC), messaging (Kafka/AMQP), event-driven architecture, workflow orchestration, distributed systems.
- Security by design: IAM, encryption, key management, secure SDLC, threat modelling.
- Resilience engineering: HA/DR designs, failure modes, back-pressure, idempotency, consistency models.
- Cloud and/or hybrid architecture experience (container platforms, service mesh optional), plus CI/CD and infrastructure-as-code awareness.
- Strong stakeholder management and ability to translate business outcomes into implementable designs.
Desirable
- Experience with case management/BPM platforms and investigation tooling patterns.
- Familiarity with SWIFT message types relevant to investigations and tracking (depending on scope/market).
- Knowledge of operational risk controls, audit requirements, and regulatory expectations around payment handling.
- Experience modernising legacy payments operations using incremental migration.
Education / certifications (optional)
- Degree in Computer Science/Engineering or equivalent experience
- Architecture certifications (e.g., TOGAF) and/or cloud certifications (as applicable)






