Description :

- Inviting applications for the role of Information Security Architect.

- Open for NCR , Bangalore , Hyderabad , Mumbai & Pune.

- Genpact is seeking Security Architect to support the design of information security systems and solutions that effectively balance business needs with cyber security requirements.

- design and govern security across enterprise compute - Server (Windows/Linux), identity, virtualization, and endpoint platforms in on prem, hybrid, and cloud environments.

Responsibilities :

- Support design of information security systems and solutions that effectively balance business needs with cyber security requirements.

- Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues.

- Identify emerging security threats and accordingly, architect elements/controls which can mitigate such threats.

- Ensure alignment of security controls, standards and frameworks with business and technology strategy.

- Identify security design gaps in existing and proposed architectures and recommend suitable changes/enhancements.

- Technical security assessments and configuration reviews of a broad range of solution components Endpoint/server security, storage, backup & recovery, virtualizations and Identity and Access management platforms etc.

- and facilitate remediation/closure of findings.

- Architect and secure Active Directory and Azure Entra ID (hybrid identity, MFA, Conditional Access).

- Define security architecture for Server (Windows/Linux) computing, VDI / VSI, and Citrix environments.

- Lead endpoint security and MDM strategy using Microsoft Intune.

- Design and manage Group Policy, security baselines, and configuration hardening.

- Ensure secure DNS and DHCP architecture and services.

- Drive identity, endpoint, and compute security governance, standards, and compliance.

- Partner with Infrastructure, Cloud, and Risk teams on secure design and remediation.

Qualifications :

- Relevant Bachelors degree (or equivalent);.

- 8+years of relevant experience.

Preferred qualifications and experience :

- Experience in security architecture, design and implementation of security solutions in on prem data center as well as cloud (Azure, AWS).

- Strong foundations on design of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements.

- Strong understanding of Information security concepts including authentication, authorization, ntlm/ldaps/oauth/OpenID/Kerberos/SAML, with experience on Identity and access management (IAM), Single Sign-On (SSO), Risk based authentication, multi-factor authentication technologies.

- Good knowledge and experience of Active Directory design GPO, DNS, DHCP,OS Hardening, remote access, operating system hardening for servers/client machines, PKI/certificate services, web security gateways, EDR, Enterprise mobility management (EMM), MDM and MAM etc.

- Strong knowledge of Security architecture, Zero trust concepts, Routing/ Switching, NAT/PAT, Access-Lists, DMZs, IPSEC VPN tunnels, firewall technologies (Cisco, PaloAlto, Checkpoint, Fortinet) etc.

- Security considerations of cloud computing : including data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks.

- Understanding of NIST standards, ISO27001, COBIT, PCI-DSS etc.

- Security professional certifications such as CISSP, CISM, CISA, ISSAP, ISSEP, CEH etc.