{"id":1284933,"url":"https://alion.io/job/talent-potential-consulting-security-architect","title":"Security Architect","company":{"id":3806460,"name":"Talent Potential Consulting","domain":"talentpotentialconsulting.in","url":"https://alion.io/company/talent-potential-consulting-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":60000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":576},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Apache Iceberg","optional":false},{"name":"Apache Kafka","optional":false},{"name":"Apache NiFi","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Falco","optional":false},{"name":"Flink","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"Kong","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MQTT","optional":false},{"name":"OPC UA","optional":false},{"name":"OpenSearch","optional":false},{"name":"PKI","optional":false},{"name":"Prometheus","optional":false},{"name":"Service Mesh","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Tokenization","optional":false},{"name":"Trivy","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Zeek","optional":false},{"name":"Zero Trust","optional":false},{"name":"Digital Twin","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-08-19T04:13:07Z","employer_posted_date":null,"last_verified_at":"2026-08-19T04:13:07Z","board_verified":false,"closed_at":null,"days_open":55,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":55},"description":"Role : Security Architect\n\nAbout the Role : \n\nWe are seeking a hands-on Security Architect to define, implement, and govern security architecture across a next-generation airport operations and intelligence platform. The role spans cloud-native, hybrid cloud + on-prem, OT/IoT, real-time streaming, AI/ML, and critical airport infrastructure environments. This is a technical role requiring practical architecture skills, not purely governance or compliance.\n\nKey Responsibilities : \n\nSecurity Architecture & Platform Security : \n\n- Define enterprise security architecture for hybrid cloud, on-prem, and edge deployments.\n\n- Design secure architectures for Kubernetes platforms, event-driven streaming, data lakehouse, AI/ML workloads, and real-time systems.\n\n- Build zero-trust patterns; establish security reference architectures and standards.\n\n- Perform architecture reviews and threat modeling for new products and integrations.\n\nIAM, SSO & Access Governance : \n\n- Architect enterprise IAM using Keycloak, Microsoft Entra ID / Azure AD, OAuth2, OIDC, SAML, and JWT.\n\n- Design RBAC and multi-tenant isolation across data, API, UI, and streaming layers.\n\n- Define service-to-service authentication, secrets management, and certificate strategies.\n\nCloud & Kubernetes Security : \n\n- Define security controls for AWS and Kubernetes : network segmentation, service mesh, API gateway, WAF, runtime security, container scanning, supply chain.\n\n- Establish DevSecOps pipelines and hardening standards for Kubernetes, APIs, databases, etc.\n\nData & Streaming Security : \n\n- Secure large-scale platforms built on Apache Kafka, Flink, Iceberg, and NiFi.\n\n- Define encryption, tokenization, data masking, PII protection, lineage, and secure multi-tenancy.\n\nOT / IoT / Airport Systems Security : \n\n- Design secure IT/OT/IoT integration patterns; secure SCADA, BMS, PLCs, OPC-UA, MQTT, and CCTV/VMS systems.\n\n- Define IEC 62443-aligned OT segmentation zones and secure edge ingestion architectures.\n\nSecurity Operations & Governance : \n\n- Define logging, monitoring, audit, and incident response architecture.\n\n- Support SIEM, SOC, IDS/IPS, and threat detection integration.\n\n- Conduct threat modeling, risk assessments, vulnerability remediation guidance, and compliance audits.\n\nRequired Skills & Experience : \n\nCore Experience : \n\n- 10+ years in cybersecurity, platform security, or security architecture.\n\n- Strong hands-on experience in cloud-native and hybrid infrastructure security.\n\n- Experience in critical infrastructure, airports, or OT environments preferred.\n\nTechnical Skills : \n\nCloud & Infrastructure : \n\n- AWS/Azure security architecture.\n\n- Kubernetes & container security.\n\n- VPN and hybrid connectivity.\n\n- Linux hardening.\n\nData & Streaming : \n\n- Kafka security.\n\n- Secure API architecture.\n\n- Data governance & encryption.\n\n- Real-time platform security.\n\nIAM & Identity : \n\n- Keycloak, Azure AD / Entra ID.\n\n- OAuth2 / OIDC / SAML.\n\n- RBAC / ABAC.\n\n- PKI & certificate management.\n\nOT/IoT Security : \n\n- IEC 62443.\n\n- SCADA / ICS security.\n\n- OT network segmentation.\n\n- Industrial protocols & gateways.\n\nDevSecOps & Tooling : \n\n- Vault, Kong/API gateways, Wazuh/Falco/Zeek, Trivy, Prometheus/Grafana, ELK/OpenSearch, SIEM platforms.\n\nGood to Have : \n\n- Application, Cloud, System architecture experience.\n\n- Experience in airport, transportation, smart city, or critical infrastructure domains.\n\n- Exposure to AI/ML, Digital Twin, GIS, or operational intelligence platforms.\n\n- Knowledge of NIST, ISO 27001, CERT-In, and IEC 62443 frameworks.\n\nQualifications : \n\n- Bachelor's or Master's in Computer Science, Cybersecurity, Information Security, or related field.\n\n- Preferred certifications : CISSP, CCSP, CISM, AWS Security Specialty, Kubernetes Security, IEC 62443.\n\nWhat We're Looking For : \n\n- Strong systems thinking.\n\n- Practical engineering mindset.\n\n- Bridge OT + IT + Cloud + Data + AI ecosystems.\n\n- Collaborative across architects, developers, DevOps, and customers.\n\n- Strong documentation skills.\n\n- Comfortable in fast-moving platform environments.\nSkills\nCyber Security, Cloud Security, DevSecOps, Threat Modeling, iAM, SSO Integration, Kubernetes, SecOps, CISSP, CISM, Security Architect","description_format":"text","description_chars":4219,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-09-26T04:00:00Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.543,"p_room":0.45,"age_days":55,"expected_fill_days":29,"reasons":["seen:55","win:tail"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/talent-potential-consulting-security-architect","json_url":"https://alion.io/job/talent-potential-consulting-security-architect.json","meta":{"generated_at":"2026-10-13T11:50:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18312,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806460},"rest":"https://alion.io/mcp/rest/get_company?id=3806460"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftalent-potential-consulting-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftalent-potential-consulting-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftalent-potential-consulting-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/talent-potential-consulting-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftalent-potential-consulting-security-architect"}]}