Company Overview

Incedo is a US-based consulting data science and technology services firm with over 3000 people helping clients
from our six offices across US Mexico and India. We help our clients achieve competitive advantage through
end-to-end digital transformation. Our uniqueness lies in bringing together strong engineering data science and
design capabilities coupled with deep domain understanding. We combine services and products to maximize
business impact for our clients in telecom Banking Wealth Management product engineering and life science
& healthcare industries.
Working at Incedo will provide you an opportunity to work with industry leading client organizations deep
technology and domain experts and global teams. Incedo University our learning platform provides ample
learning opportunities starting with a structured onboarding program and carrying throughout various stages of
your career. A variety of fun activities is also an integral part of our friendly work environment. Our flexible
career paths allow you to grow into a program manager a technical architect or a domain expert based on your
skills and interests.
Our Mission is to enable our clients to maximize business impact from technology by

- Harnessing the transformational impact of emerging technologies
- Bridging the gap between business and technology

Role Description

What should the complete platform design be why is this the right choice and how do we move from the current state to it safely
Significant experience designing and delivering production platforms or complex distributed systems with responsibility for architecture decisions technical direction risks trade-offs and migration planning.
Strong experience with on-premises air-gapped edge appliance-based or otherwise restricted environments where internet access cloud services and ongoing remote access cannot be assumed.
Hands-on knowledge of Kubernetes Helm containers Linux CI/CD networking ingress persistent storage monitoring logging resource management and release automation.
Experience designing VM and appliance delivery including VMDK or comparable formats offline packaging installation configuration patching upgrades rollback and recovery.
Solid understanding of platform security including public/private key cryptography TLS certificate authorities trust chains identity authentication authorization encryption signing and certificate lifecycle management.




Practical understanding of Kubernetes Secrets Sealed Secrets Vault or similar solutions including how credentials are generated stored delivered to workloads rotated backed up and recovered.
Previous application development experience preferably with Java or Go and a practical understanding of frontend-to-backend flows APIs databases service communication authentication and failure handling.
Experience designing database backup restoration migration upgrade compatibility and rollback processes including proactive validation and recovery when an upgrade fails partway through.

Ability to evaluate current platform components and future alternatives based on security offline operation hardware requirements supportability licensing operational effort and migration cost.
Strong communication technical leadership and cross-team decision-making skills with the ability to distinguish current implementation known limitations and future design while working across development DevOps security test product and support teams.

While evaluating try to see this from this perspective (one use case here:)

The architect would:

Decide that every customer installation must have unique credentials.
Define when and where credentials are generated.
Decide how backup restoration rotation upgrades and recovery should work.
Compare Vault Sealed Secrets installation-generated Kubernetes Secrets and other approaches.
Consider offline operation supportability migration and customer impact.
Define the target design and migration stages.

Technical Skills

What should the complete platform design be why is this the right choice and how do we move from the current state to it safely
Significant experience designing and delivering production platforms or complex distributed systems with responsibility for architecture decisions technical direction risks trade-offs and migration planning.




Strong experience with on-premises air-gapped edge appliance-based or otherwise restricted environments where internet access cloud services and ongoing remote access cannot be assumed.
Hands-on knowledge of Kubernetes Helm containers Linux CI/CD networking ingress persistent storage monitoring logging resource management and release automation.
Experience designing VM and appliance delivery including VMDK or comparable formats offline packaging installation configuration patching upgrades rollback and recovery.
Strong understanding of platform security including public/private key cryptography TLS certificate authorities trust chains identity authentication authorization encryption signing and certificate lifecycle management.
Practical understanding of Kubernetes Secrets Sealed Secrets Vault or similar solutions including how credentials are generated stored delivered to workloads rotated backed up and recovered.
Previous application development experience preferably with Java or Go and a practical understanding of frontend-to-backend flows APIs databases service communication authentication and failure handling.
Experience designing database backup restoration migration upgrade compatibility and rollback processes including proactive validation and recovery when an upgrade fails partway through.

Ability to evaluate current platform components and future alternatives based on security offline operation hardware requirements supportability licensing operational effort and migration cost.
Strong communication technical leadership and cross-team decision-making skills with the ability to distinguish current implementation known limitations and future design while working across development DevOps security test product and support teams.

While evaluating try to see this from this perspective (one use case here:)

The architect would:

Decide that every customer installation must have unique credentials.
Define when and where credentials are generated.
Decide how backup restoration rotation upgrades and recovery should work.
Compare Vault Sealed Secrets installation-generated Kubernetes Secrets and other approaches.
Consider offline operation supportability migration and customer impact.
Define the target design and migration stages.

Nice-to-have skills

Qualifications

Company Value

We value diversity at Incedo. We do not discriminate based on race religion color national origin gender sexual orientation age marital status veteran status or disability status.

Required Experience:

Senior IC

📌 Senior Technical Architect (Pune)
🏢 Incedo
📍 Pune