{"id":3200794,"url":"https://alion.io/job/bcg-x-global-cybersecurity-senior-manager-architecture","title":"Global Cybersecurity Senior Manager - Architecture","company":{"id":655,"name":"Boston Consulting Group","domain":"bcg.com","url":"https://alion.io/company/bcg-x","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":48000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-10-18T00:00:00Z","employer_posted_date":"2026-10-18","last_verified_at":"2026-10-26T16:04:53Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Locations: Gurgaon | Lisbon\nWho We Are\nBoston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.\nTo succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.\nWhat You'll Do\nAs the Infrastructure Security Architect - Secure Network, you will serve as the dedicated security architecture partner for BCG’s Secure Network Engineering Squad, defining the security strategy, architecture, and governance that protect the firm’s global network infrastructure spanning Security Service Edge, segmentation, DNS, and cloud network environments. You will establish the security requirements, architectural standards, and design guardrails that enable secure, scalable, and resilient network platforms while advancing BCG’s Zero Trust strategy and enterprise security objectives.\nAs part of the Infrastructure Security Architecture team within Information Security Risk Management (ISRM), you will operate through a shared accountability model with Platform Engineering. You will provide architectural direction, governance, and design oversight throughout the solution lifecycle, while engineering teams retain ownership for implementation, delivery, and operational management. Success in this role requires strong technical leadership, sound architectural judgment, and the ability to influence global stakeholders across a matrixed organization.\nDefine and maintain network security architecture for the enterprise: Security Service Edge (SSE), Zero Trust Network Access (ZTNA), secure web gateway, and CASB patterns.\nOwn architectural requirements for the enterprise Security Service Edge (SSE) platform, including FQDN-based policy enforcement and elimination of direct IP access patterns, in alignment with published SSE security standards.\nDefine network segmentation and zoning strategy across offices, data centers, and cloud environments to constrain lateral movement, consistent with NIST SP 800-207 zero trust principles.\nDefine DNS and web-layer security architecture requirements, including protective DNS, domain governance interfaces, and egress control.\nOwn security architecture requirements for cloud network infrastructure: VPC/VNetdesign patterns, firewall zoning, next-generation firewall and cloud gateway placement, and secure interconnects.\nDefine secure remote access architecture (ZTNA/VPN) and the deprecation path for legacy perimeter access patterns.\nAuthor and maintain the security standards, reference architectures, and control requirements that govern the Secure Network domain, mapped to CSF-09 (Security Architecture - Network & Cloud/Systems Security) and ZTMM maturity targets.\nConduct security architecture reviews for secure network initiatives; issue dispositions, conditions, and architectural decision records traceable to ISRM governance.\nContribute domain expertise to ZTMM maturity assessments, control gap analyses, and the security architecture roadmap.\nServe as the dedicated architecture counterpart to the Secure Network Engineering Squad, validating feasibility and effectiveness of security controls through implementation without assuming delivery ownership.\nDefine network segmentation and zoning strategy across offices, data centers, and cloud environments, underpinned by authoritative network asset inventory and topology mapping\nDefine logging, telemetry, and monitoring requirements (CSF-12) for secure network services in partnership with Security Operations, which owns SIEM, detection engineering, and continuous monitoring.\nDrive automation and policy-as-code adoption for network security controls, partnering with engineering to move enforcement and drift detection from manual review toward continuous, automated validation.\nWhat You'll Bring\nBachelor’s degree in a relevant field or equivalent practical experience.\n6-10 years in security architecture, security engineering, or infrastructure security with demonstrated architecture responsibility.\nExperience operating in large, audit-sensitive, or regulated enterprise environments with formal governance and exception processes.\nStrong understanding of zero trust architecture (NIST SP 800-207, CISA ZTMM), enterprise control frameworks, and hybrid cloud environments (Azure, AWS, GCP).\nDeep hands-on architecture experience with SSE platforms (Zscaler, Palo Alto Prisma Access, or equivalent), ZTNA design, and enterprise segmentation programs\nStrong command of NIST SP 800-207 and practical zero trust network design in hybrid environments (on-prem, Azure, AWS, GCP).\nWorking knowledge of DNS security, SD-WAN, cloud-native network controls, and network detection and response (NDR) integration points.\nPreferred Qualifications\nExperience with cloud workload protection, CNAPP, CSPM, and cloud security posture management.\nFamiliarity with network compliance, conditional access, and identity-driven security controls.\nProfessional certifications such as CISSP, SABSA, or relevant cloud security certifications.\nWho You'll Work With\nYou will join the Infrastructure Security Architecture team within Information Security Risk Management (ISRM), serving as the dedicated security architecture partner for BCG’s Secure Network Engineering Squad. In this role, you will help define the security strategy, architectural standards, and governance that guide the design and evolution of secure network platforms spanning SSE, segmentation, DNS, and cloud network infrastructure.\nYou will collaborate closely with engineering, cloud, identity, infrastructure, and security teams across BCG’s global technology organization to ensure security controls are consistently designed, implemented, and governed across the network domain. You will also partner with Security Operations, Risk Management, and architecture peers to strengthen Zero Trust capabilities, advance security maturity, and support enterprise-wide cybersecurity initiatives.\nWorking within a highly collaborative, matrixed environment, you will influence technical direction, build alignment on architectural decisions, and help teams deliver secure, scalable solutions that balance business objectives, operational effectiveness, and risk management.\nAdditional info\nAt BCG, our people and relationships are at the heart of everything we do. We believe that in-person collaboration plays an important role in our culture, mentorship, and professional development.\nFor this role, you will generally be expected to work from a BCG office or in person with clients on a regular basis (typically around 50% of working time), depending on business needs and in line with local policies and practices.\nWe aim to provide a dynamic and collaborative environment that fosters connection and teamwork.\nYou’re Good At\nTranslating enterprise security standards into practical, implementable engineering requirements.\nHolding architecture authority constructively: enabling delivery teams rather than blocking them, while keeping governance boundaries intact.\nCommunicating precisely across engineering squads, architecture peers, and senior security leadership.\nBoston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.\nBCG is an E - Verify Employer. Click here for more information on E-Verify.","description_format":"text","description_chars":8371,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-24T08:17:26Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":8,"expected_fill_days":49,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/bcg-x-global-cybersecurity-senior-manager-architecture","json_url":"https://alion.io/job/bcg-x-global-cybersecurity-senior-manager-architecture.json","meta":{"generated_at":"2026-10-26T20:11:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27230,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":655},"rest":"https://alion.io/mcp/rest/get_company?id=655"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbcg-x-global-cybersecurity-senior-manager-architecture"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbcg-x-global-cybersecurity-senior-manager-architecture"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbcg-x-global-cybersecurity-senior-manager-architecture"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bcg-x-global-cybersecurity-senior-manager-architecture\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbcg-x-global-cybersecurity-senior-manager-architecture"}]}