Senior Security Architect

Who we are

We drive innovation, from advisory and implementation to managed services and beyond, powered by a global team of over 18,500 experts representing over 90 nations in more than 30 countries. With SAP at our core and a powerful ecosystem of partners such as Microsoft and ServiceNow, we continuously improve solutions and AI-driven technology to make them work for companies and their people.

As part of NTT DATA, a $30+ billion business and technology services, AI and digital infrastructure leader, we are connected to a truly global organization. As a Global Top Employer, NTT DATA serves 75% of the Fortune Global 100 and, with experts in over 70 countries, co-innovates solutions that encourage experimentation and recognize great work.

With us, you have endless opportunities to think big, act bold and take ownership. Make this the place where you belong, learn and build your network.

What you will be doing

• As a Senior Security Architect, you will define and drive the security architecture for a global backup engineering capability protecting more than 450,000 virtual machines across multiple hyperscaler environments and supporting thousands of customers.
• Your work will shape the security posture of a critical infrastructure capability, ensuring that backup and recovery systems remain resilient against evolving cyber threats and comply with demanding security and regulatory standards.
• Define and drive the security architecture for enterprise backup and recovery solutions across AWS, Microsoft Azure, Google Cloud Platform, IBM Cloud and Alibaba Cloud.
• Ensure that security designs align with organizational standards, industry frameworks and applicable regulatory requirements.
• Lead threat-modelling exercises, security assessments and vulnerability analyses for large-scale backup infrastructure.
• Define and enforce identity and access management policies, role-based access control models, multi-factor authentication requirements and least-privilege principles.
• Design and implement DevSecOps practices across CI/CD pipelines, infrastructure-as-code workflows and automated deployment processes.
• Embed container security, infrastructure-as-code scanning and automated security testing into engineering workflows.
• Collaborate with product management and engineering teams to integrate security requirements throughout the product development lifecycle.
• Influence product roadmaps and feature priorities from a security-first perspective.
• Develop and maintain ransomware and malware mitigation strategies for backup and recovery environments.
• Define immutable backup designs, Zero Trust architectures, recovery strategies and incident response frameworks.
• Integrate relevant threat intelligence into security controls, operational processes and response planning.
• Contribute to internal and external security audit preparation, evidence gathering and stakeholder coordination.
• Manage audit findings, remediation activities and continuous compliance improvements.
• Conduct secure design and code reviews and provide actionable security guidance to engineering teams.
• Monitor evolving threats, security practices and regulatory expectations and translate them into architecture improvements.

What you will bring along

• A bachelor’s degree in Computer Science, Information Security or a related field, or equivalent practical experience.
• Between 8 and 12 years of experience in information security, security architecture or a closely related field.
• Deep DevSecOps expertise, including the integration of security into CI/CD pipelines, infrastructure-as-code scanning, container security and automated security testing.
• A CISSP certification or an equivalent certification such as CISM or CCSP.
• Strong working knowledge of recognized security frameworks, including NIST, ISO 27001 and CIS Controls.
• Proven experience developing ransomware and malware mitigation strategies, including incident response planning, recovery design and threat intelligence integration.
• Hands-on experience managing security audits, including preparation, evidence gathering, remediation tracking and stakeholder coordination.
• Solid understanding of Zero Trust architecture principles and practical experience applying them to cloud and infrastructure environments.
• Experience with Secure Software Development Lifecycle practices, including threat modelling, secure architecture and design reviews, and secure code reviews.
• Strong analytical and problem-solving skills, with the ability to assess complex risks and translate them into practical security controls.
• Excellent stakeholder management and communication skills, with the ability to influence engineering, product and business teams.
• Ability to operate effectively in a large-scale, international and multi-cloud environment.
• Cloud security certifications would be considered a strong advantage, such as Google Cloud Professional Cloud Security Engineer, Microsoft Cybersecurity Architect Expert (SC-100), Azure Security
• Engineer Associate (AZ-500), AWS Certified Security - Specialty or AWS Certified Solutions Architect - Professional.
• Strong knowledge of AWS, Microsoft Azure or Google Cloud infrastructure, particularly compute, storage and networking services at scale, would be beneficial.
• Experience securing cloud-native backup and disaster recovery solutions across multi-cloud environments would be an advantage.
• Familiarity with SAP technologies, SAP infrastructure environments or SAP Business Technology Platform would be beneficial.
• Experience contributing security perspectives to product roadmaps and feature prioritization would be advantageous.
• Knowledge of container and Kubernetes security, including EKS, AKS or GKE, image scanning, runtime protection and orchestration hardening, would be beneficial.
• You are fluent in written and spoken English.