Company Overview

Incedo is a US-based consulting, data science and technology services firm with over 3000 people helping clients from our six offices across US, Mexico and India. We help our clients achieve competitive advantage through end-to-end digital transformation. Our uniqueness lies in bringing together solid engineering, data science, and design capabilities coupled with deep domain understanding. We combine services and products to maximize business impact for our clients in telecom, Banking, Wealth Management, product engineering and life science

& healthcare industries.

Working at Incedo will provide you an opportunity to work with industry leading client organizations, deep technology and domain experts, and global teams.

Incedo

University, our learning platform, provides ample learning opportunities starting with a structured onboarding program and carrying throughout various stages of your career. A variety of fun activities is also an integral part of our friendly work environment. Our adaptable career paths allow you to grow into a program manager, a technical architect or a domain expert based on your skills and interests.

Our Mission is to enable our clients to maximize business impact from technology by

- Harnessing the transformational impact of emerging technologies
- Bridging the gap between business and technology

Role Description

What should the complete platform design be, why is this the right choice, and how do we move from the current state to it safely?”

Significant experience designing and delivering production platforms or complex distributed systems, with responsibility for architecture decisions, technical direction, risks, trade-offs, and migration planning.

Strong experience with on-premises, air-gapped, edge, appliance-based, or otherwise restricted environments where internet access, cloud services, and ongoing remote access cannot be assumed.

Hands-on knowledge of Kubernetes, Helm, containers, Linux, CI/CD, networking, ingress, persistent storage, monitoring, logging, resource management, and release automation.

Experience designing VM and appliance delivery, including VMDK or comparable formats, offline packaging, installation, configuration, patching, upgrades, rollback, and recovery.

Strong understanding of platform security, including public/private key cryptography, TLS, certificate authorities, trust chains, identity, authentication, authorization, encryption, signing, and certificate lifecycle management.





Practical understanding of Kubernetes Secrets, Sealed Secrets, Vault, or similar solutions, including how credentials are generated, stored, delivered to workloads, rotated, backed up, and recovered.

Previous application development experience, preferably with Java or Go, and a practical understanding of frontend-to-backend flows, APIs, databases, service communication, authentication, and failure handling.

Experience designing database backup, restoration, migration, upgrade, compatibility, and rollback processes, including proactive validation and recovery when an upgrade fails partway through.

Ability to evaluate current platform components and future alternatives based on security, offline operation, hardware requirements, supportability, licensing, operational effort, and migration cost.

Strong communication, technical leadership, and cross-team decision-making skills, with the ability to distinguish current implementation, known limitations, and future design while working across development, DevOps, security, test, product, and support teams.

While evaluating try to see this from this perspective (one use case here:)

The architect would

Decide that every customer installation must have unique credentials.

Define when and where credentials are generated.

Decide how backup, restoration, rotation, upgrades, and recovery should work.

Compare Vault, Sealed Secrets, installation-generated Kubernetes Secrets, and other approaches.

Consider offline operation, supportability, migration, and customer impact.

Define the target design and migration stages.

Technical Skills

What should the complete platform design be, why is this the right choice, and how do we move from the current state to it safely?”

Significant experience designing and delivering production platforms or complex distributed systems, with responsibility for architecture decisions, technical direction, risks, trade-offs, and migration planning.

Strong experience with on-premises, air-gapped, edge, appliance-based, or otherwise restricted environments where internet access, cloud services,



and ongoing remote access cannot be assumed.

Hands-on knowledge of Kubernetes, Helm, containers, Linux, CI/CD, networking, ingress, persistent storage, monitoring, logging, resource management, and release automation.

Experience designing VM and appliance delivery, including VMDK or comparable formats, offline packaging, installation, configuration, patching, upgrades, rollback, and recovery.

Strong understanding of platform security, including public/private key cryptography, TLS, certificate authorities, trust chains, identity, authentication, authorization, encryption, signing, and certificate lifecycle management.

Practical understanding of Kubernetes Secrets, Sealed Secrets, Vault, or similar solutions, including how credentials are generated, stored, delivered to workloads, rotated, backed up, and recovered.

Previous application development experience, preferably with Java or Go, and a practical understanding of frontend-to-backend flows, APIs, databases, service communication, authentication, and failure handling.

Experience designing database backup, restoration, migration, upgrade, compatibility, and rollback processes, including proactive validation and recovery when an upgrade fails partway through.

Ability to evaluate current platform components and future alternatives based on security, offline operation, hardware requirements, supportability, licensing, operational effort, and migration cost.

Strong communication, technical leadership, and cross-team decision-making skills, with the ability to distinguish current implementation, known limitations, and future design while working across development, DevOps, security, test, product, and support teams.

While evaluating try to see this from this perspective (one use case here:)

The architect would

Decide that every customer installation must have unique credentials.

Define when and where credentials are generated.

Decide how backup, restoration, rotation, upgrades, and recovery should work.

Compare Vault, Sealed Secrets, installation-generated Kubernetes Secrets, and other approaches.

Consider offline operation, supportability, migration, and customer impact.

Define the target design and migration stages.

Nice-to-have skills

Qualifications

Company Value

We value diversity at Incedo. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

📌 Architect (Pune)
🏢 Incedo
📍 Pune