Security Architect

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Data Encryption Good to have skills : NA Minimum 7.5 year(s) of experience is required Educational Qualification : 15 years full time education Summary: The L8 Build Engineer will be responsible for designing, implementing, upgrading, automating, and enhancing the organization's PKI, Certificate Lifecycle Management, and Encryption/Key Management platforms. This role will drive transformation initiatives, platform modernization, integrations, and engineering activities across Microsoft PKI, Venafi, and Thales Cipher Trust while ensuring security, scalability, and operational readiness. Based on your PKI roadmap activities, this includes Venafi upgrades, Cipher Trust upgrades, PKI modernization, automation, and platform integrations. Roles & Responsibilities: - Design and implement Microsoft PKI solutions, including Root CA, Intermediate CA, Issuing CA, CRL, OCSP, and NDES services. - Plan and execute PKI upgrades, migrations, renewals, and decommissioning activities. - Develop high availability and disaster recovery solutions for PKI services. - Define PKI standards, certificate templates, lifecycle policies, and governance controls. - Lead PKI modernization and cloud integration initiatives. - Lead build projects, enhancements, and transformation initiatives. - Prepare technical design documents, implementation guides, and build runbooks. - Coordinate with security architects, infrastructure teams, vendors, and application owners. - Support transition of build activities into RUN operations. - Provide technical leadership, mentoring, and KT sessions for support teams. - Ensure PKI and encryption services comply with organizational security standards. - Conduct security reviews, hardening, and vulnerability remediation. - Support audits and compliance assessments. - Develop security baselines and architecture standards. - Develop automation solutions using PowerShell, REST APIs, Python, or similar technologies. - Automate certificate renewals, deployment validation, monitoring, and governance workflows. - Build integrations between Venafi, CipherTrust, ServiceNow, Active Directory, and cloud platforms. - Identify manual activities and implement self-service or automated solutions. - Drive Infrastructure as Code (IaC) and configuration management practices. - Design and implement Thales Cipher Trust Manager solutions. - Support encryption lifecycle management, key management, and secrets protection capabilities. - Perform platform upgrades, migrations, and integration activities. - Implement key rotation, backup, recovery, and compliance controls. - Design secure integration with enterprise applications, databases, and cloud services. Professional & Technical Skills: - Microsoft ADCS - Certificate Authorities (Root, Intermediate, Issuing) - CRL, OCSP, NDES - SSL/TLS and Cryptography - HSM Integration - Venafi TPP / TLS Protect - Certificate Lifecycle Automation - Certificate Discovery - Certificate Governance - API Integration - Thales Cipher Trust Manager - Encryption Key Management - Secrets Management - KMIP - HSM and Vault Integration - PowerShell - Active Directory - Windows Server Administration Additional Information: - The candidate should have minimum 8-10 years of Cybersecurity, IAM, PKI, or Encryption experience. - 3+ years designing and implementing PKI solutions. - Hands-on experience with Venafi and certificate automation. - Experience with Cipher Trust, HSMs, or enterprise encryption platforms. - Experience leading security engineering or transformation projects. - Venafi Certified Professional - This position is based at our Bengaluru office. 15 years full time education Important Notice We have been alerted to the existence of fraudulent messages asking job seekers to set up payment to cover various costs associated with establishing employment at Accenture. No one is ever required to pay for employment at Accenture. If you are contacted by someone asking for payment, please do not respond, and contact us at india.fc.check@accenture.com immediately. Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.