Zero Trust Architect

We are seeking a highly skilled Infrastructure Transformation and Zero Trust Architect to drive enterprise modernisation initiatives focused on cloud adoption, identity transformation, network modernisation, and security enhancement. The ideal candidate will have hands-on experience in designing and implementing Zero Trust Architecture (ZTA), Google Workspace environments, Active Directory modernisation, and cloud-based identity solutions.

This role requires close collaboration with infrastructure, network, security, and business stakeholders to successfully execute transformation programs while ensuring compliance, resilience, and operational excellence.

The candidate will have responsibilities across the following functions:

Infrastructure Transformation and Modernisation:

• Lead and support enterprise infrastructure modernisation and transformation programs.
• Assess existing on-premises environments and define modernisation roadmaps aligned with business objectives.
• Drive migrations from legacy/on-premises infrastructure to modern cloud platforms.
• Develop target-state architecture and implementation plans for cloud-first environments.

Zero Trust Architecture (ZTA):

• Design and implement Zero Trust Architecture (ZTA) strategies for Google Workspace (GWS) environments.
• Establish security controls based on least-privilege access, continuous verification, and identity-centric security models.
• Ensure transformation initiatives align with Zero Trust principles, industry standards, and compliance requirements.

Identity and Access Management:

• Lead Active Directory modernisation initiatives, transforming on-premises AD environments into modern cloud Identity Providers (IDPs).
• Implement and manage solutions such as: Google Credential Provider for Windows (GCPW), Microsoft Entra ID (Azure AD), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access Policies.
• Define identity governance, access management, and lifecycle management processes.

Network and Endpoint Modernisation:

• Design secure, scalable, and highly available network architectures.
• Establish Zero Trust-based network design supporting global operations.
• Optimise connectivity between India delivery centres and US client environments.
• Drive endpoint modernisation initiatives including device identity, endpoint compliance, and secure access controls.

Program Governance and Stakeholder Management:

• Guide and support internal infrastructure, network, and security teams in planning and implementing configuration and architectural changes.
• Monitor project progress, risks, dependencies, and mitigation plans to ensure successful delivery.
• Serve as the primary liaison between business stakeholders, technology teams, vendors, and external partners.
• Provide regular program updates, executive reports, and risk assessments.

Business Continuity and Disaster Recovery:

• Create, document, and maintain Business Continuity Plans (BCP) and Disaster Recovery (DR) strategies.
• Define and validate Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
• Conduct DR drills and business continuity testing exercises.
• Ensure critical business services meet availability and resiliency requirements.

Requirements:

• Strong experience with Google Workspace (GWS) administration and security.
• Expertise in Zero Trust Architecture (ZTA) design and implementation.
• Experience with: Active Directory (AD) Migration, Microsoft Entra ID (Azure AD), Google Credential Provider for Windows (GCPW), Identity and Access Management (IAM), SSO, MFA, Conditional Access.
• Knowledge of cloud platforms such as Google Cloud Platform (GCP) and Microsoft Azure.
• Experience in network architecture design, WAN optimisation, VPN technologies, and secure remote access.
• Understanding of endpoint security and device management solutions.

Project and Transformation Skills:

• Experience leading infrastructure transformation and cloud migration projects.
• Ability to manage multiple workstreams, dependencies, risks, and stakeholders.
• Strong documentation, planning, and governance skills.
• Understanding of compliance and security frameworks.

Preferred Qualifications:

• Certifications such as: Google Professional Cloud Architect, Google Workspace Administrator, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Solutions Architect Expert, CISSP, CCSP, or equivalent security certifications.
• Experience in global delivery environments supporting geographically distributed teams.
• Exposure to enterprise BCP/DR planning and testing.