Role : Security Architect

About the Role :

We are seeking a hands-on Security Architect to define, implement, and govern security architecture across a next-generation airport operations and intelligence platform. The role spans cloud-native, hybrid cloud on-prem, OT/IoT, real-time streaming, AI/ML, and critical airport infrastructure environments. This is a technical role requiring practical architecture skills, not purely governance or compliance.

Key Responsibilities :

Security Architecture &

- Platform Security :
- Define enterprise security architecture for hybrid cloud, on-prem, and edge deployments.
- Design secure architectures for Kubernetes platforms, event-driven streaming, data lakehouse, AI/ML workloads, and real-time systems.
- Build zero-trust patterns; establish security reference architectures and standards.
- Perform architecture reviews and threat modeling for new products and integrations.

IAM, SSO &

- Access Governance :
- Architect enterprise IAM using Keycloak, Microsoft Entra ID / Azure AD, OAuth2, OIDC, SAML, and JWT.
- Design RBAC and multi-tenant isolation across data, API, UI, and streaming layers.
- Define service-to-service authentication, secrets management, and certificate strategies.

Cloud &

- Kubernetes Security :
- Define security controls for AWS and Kubernetes : network segmentation, service mesh, API gateway, WAF, runtime security, container scanning, supply chain.
- Establish DevSecOps pipelines and hardening standards for Kubernetes, APIs, databases, etc.

Data &

- Streaming Security :
- Secure large-scale platforms built on Apache Kafka, Flink, Iceberg, and NiFi.
- Define encryption, tokenization, data masking, PII protection, lineage, and secure multi-tenancy.

OT / IoT / Airport Systems Security :

- Design secure IT/OT/IoT integration patterns; secure SCADA, BMS, PLCs, OPC-UA, MQTT, and CCTV/VMS systems.
- Define IEC 62443-aligned OT segmentation zones and secure edge ingestion architectures.

Security Operations &

- Governance :




- Define logging, monitoring, audit, and incident response architecture.
- Support SIEM, SOC, IDS/IPS, and threat detection integration.
- Conduct threat modeling, risk assessments, vulnerability remediation guidance, and compliance audits.

Required Skills &

Experience :

Core Experience :

- 10 years in cybersecurity, platform security, or security architecture.
- Strong hands-on experience in cloud-native and hybrid infrastructure security.
- Experience in critical infrastructure, airports, or OT environments preferred.

Technical Skills :

Cloud &

- Infrastructure :
- AWS/Azure security architecture.
- Kubernetes & container security.
- VPN and hybrid connectivity.
- Linux hardening.

Data &

- Streaming :
- Kafka security.
- Secure API architecture.
- Data governance & encryption.
- Real-time platform security.

IAM &

- Identity :
- Keycloak, Azure AD / Entra ID.
- OAuth2 / OIDC / SAML.
- RBAC / ABAC.
- PKI & certificate management.

OT/IoT Security :

- IEC 62443.
- SCADA / ICS security.
- OT network segmentation.
- Industrial protocols & gateways.

DevSecOps &

- Tooling :
- Vault, Kong/API gateways, Wazuh/Falco/Zeek, Trivy, Prometheus/Grafana, ELK/OpenSearch, SIEM platforms.

Good to Have :

- Application, Cloud, System architecture experience.
- Experience in airport, transportation, smart city, or critical infrastructure domains.
- Exposure to AI/ML, Digital Twin, GIS, or operational intelligence platforms.
- Knowledge of NIST, ISO 27001, CERT-In, and IEC 62443 frameworks.

Qualifications :

- Bachelor's or Master's in Computer Science, Cybersecurity, Information Security, or related field.
- Preferred certifications : CISSP, CCSP, CISM, AWS Security Specialty, Kubernetes Security, IEC 62443.

What We're Looking For :

- Strong systems thinking.
- Practical engineering mindset.
- Bridge OT IT Cloud Data AI ecosystems.
- Collaborative across architects, developers, DevOps, and customers.
- Strong documentation skills.
- Comfortable in rapid-moving platform environments.

📌 Security Architect (India)
🏢 Talent Potential Consulting
📍 India