Software Architect - IAM, AI & Zero Trust
Department: Digital Infrastructure & Platforms (IAM)
Are you a visionary software architect with a deep passion for modern cybersecurity, platform engineering, and identity governance Airbus is seeking a Software Development Architect to own and evolve the architectural vision of our IAM Self-Service Platform .
As Airbus accelerates its Digital Transformation, Identity & Access Management (IAM) is moving from a back-office utility to a core strategic product. In this role, you will define the target architecture for our self-service tools, ensure seamless integration across hybrid and cloud environments, and systematically guide our identity ecosystem toward a Zero Trust Architecture (Never Trust, Always Verify).
Operating within our leadership squad alongside the Product Manager , Technical Lead , and Techno-Functional BA , you will bridge business needs and security mandates into resilient, scalable, and developer-friendly technical blueprints.
Agentic AI & Emerging Workloads: Preparing identity frameworks to support non-human identities, AI agents, and automated machine-to-machine interactions over the next two years.
Fully embedding Security by Design and DevSecOps principles into the software development architecture and release lifecycle.
Transforming legacy identity mechanisms into continuous, dynamic, risk-based access controls and identity governance.
Architect highly performant, scalable software solutions that embed 'Security by Design' principles, driving rigorous quality and sustainability metrics while future-proofing the product roadmap which will be in-line with the IAM PSL objectives.
Developer & User Experience: Ensuring architectural alignment with Airbus Cybersecurity rules ('Blue Book'), global data privacy regulations (GDPR), EASA aviation compliance, and ITAR/EAR export control policies.
Lead the architectural shift toward Zero Trust Principles , designing mechanisms for continuous authentication,



agile authorization (ABAC/RBAC/PBAC), least-privilege access, and micro-segmentation integration.
Apply and adopt standard protocols (OIDC/OAuth2, SAML, SCIM, FIDO2) across enterprise web applications, APIs, and services to ensure architectural compliance.
Design scalable integration patterns between the core self-service portal (Python/React) and identity systems, governance platforms, and hybrid cloud environments.
Define API-first governance, microservices architecture, and secure data access layers for identity workflow engines and automation scripts.
Lead ARD (Architecture Reference Document) management, translating complex IAM requirements into precise network models, Zero Trust security views, and modular software architecture breakdowns.
Design comprehensive Observability and Telemetry strategies (logging, tracing, and monitoring) to ensure real-time visibility into identity workflows, system health, and security events.
Product Quad, Architect Network & Engineering Collaboration
Work in tandem with the Technical Lead to guide engineering teams, ensuring implementation details adhere to the master architectural design without creating technical debt.
Collaborate with the Techno-Functional BA to validate technical feasibility, security constraints, and boundary conditions for new self-service workflows.
Collaborate with cross-functional domain leaders -including Enterprise, Cyber Security, Infrastructure, and PSL Architects, alongside Data Officers and Quality/Eco-Design Experts-to drive comprehensive architectural reviews and integrate strategic recommendations.




Serve as the primary representative for the product on the internal Architecture Review Board (ARB) and Cybersecurity committees.
STRIDE) and risk assessments during the design phase to identify and mitigate vulnerabilities before development begins.
Qualifications & Experience
Graduate/Postgraduate degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Experience: 12+ years of software engineering experience, with at least 4+ years operating as an Enterprise/Software/Solution Architect in large-scale IAM or enterprise security environments.
Expertise in Microservices, Event-Driven Architecture, API Gateway patterns, RESTful APIs, and Cloud-native designs (Azure/AWS/GCP).
Active Directory, Azure AD / Entra ID, Ping Identity, Okta, or SailPoint.
Technical Stack Literacy: Strong architectural knowledge of Python , React , SQL Server , and PowerShell/Automation workflows .
CISSP, CCSP, TOGAF, Microsoft Certified: Cybersecurity Architect Expert, or AWS/Azure Solutions Architect Professional, Archimate.

Business Value & Backlog Priority
Clean Python/React Code, CI/CD, Working APIs
This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth.

Airbus India Private Limited
Permanent -------

Experience Level:
Digital

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.
Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.

📌 AWS Software Architect (Permanent) (Bengaluru)
🏢 Airbus pioneers
📍 Bengaluru