Machine Identity Service Architect

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

About Atos Group

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. 7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Must have skills

• Architected and productised identity or PKI services (reference architecture, platform evaluation and selection, service definition), not implementation only
• PKI at design depth: X.509/RFC 5280, CA hierarchy design, certificate profiles, CP/CPS, revocation (CRL/OCSP), audit frameworks (WebTrust, ETSI)
• HSM and key custody: PKCS#11, FIPS 140-3, and hands-on participation in a witnessed key ceremony
• Enrolment and renewal protocols: ACME, EST, SCEP, CMP, Microsoft auto-enrolment
• Microsoft AD CS, plus at least one of EJBCA, Entrust, DigiCert
• CLM platforms: Idira Certificate Manager (formerly Venafi), Keyfactor, AppViewX, DigiCert Trust Lifecycle Manager
• Workload identity: SPIFFE/SPIRE, Kubernetes service account tokens, cluster-to-cloud identity federation (IRSA, Azure Workload Identity, GKE), mTLS and service mesh
• Kubernetes at administrator depth and cloud IAM (Azure, AWS, GCP)
• Machine identity governance: service accounts, managed identities, service principals, OAuth application grants, API keys; ownership inference and scope reduction
• Post-quantum cryptography and cryptographic inventory: NIST FIPS 203/204/205, hybrid certificates, migration planning, crypto-agility

Good to have

• IDnomic experience
• Machine identity governance platforms (Cisco/Astrix, Entro, Natoma, Oasis, SailPoint or Saviynt non-human identity)
• Cryptographic discovery tooling (Keyfactor/InfoSec Global, SandboxAQ)
• Secrets management platforms (Vault, Akeyless) at the integration boundary

Work Location: Mumbai Bangalore

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.

Choose your future. Choose Atos.