CTO - Security Architect

Wipro; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Wipro in Bengaluru, India seeks a senior Security Architect with 10-14 years of overall experience and 5-7 years in cybersecurity, cryptography, PKI, or cloud security to lead quantum-safe architecture and migration planning across applications, infrastructure, and cloud.

You will define risk assessment methods for RSA, ECC, TLS, and related protocols, design hybrid cryptography strategies, and mentor consultants on PQC and cryptographic risk while guiding client delivery and architecture

Qualifications

• Strong understanding of RSA, ECC, PKI, X.509, TLS/SSL, SSH, IPsec, digital signatures, certificate lifecycle, HSM and KMS concepts.
• Hands-on familiarity with security architecture, threat modeling, cloud security and enterprise cryptographic controls.
• Working knowledge of NIST PQC standards, ML-KEM/Kyber, ML-DSA/Dilithium, SLH-DSA/SPHINCS+ and hybrid migration patterns.
• Ability to create reference architectures, migration roadmaps, risk scoring models and executive-ready technical narratives.

Responsibilities

• Lead crypto discovery strategy across applications, infrastructure, cloud platforms, network protocols, certificates, keys and signing workflows.
• Define quantum-risk assessment method covering RSA, ECC, TLS, SSH, IPsec, code signing, PKI, HSM/KMS, data confidentiality and integrity exposure.
• Design crypto-agility target architecture, hybrid cryptography strategy and reference migration patterns.
• Review discovery findings and convert them into prioritized remediation roadmaps.
• Lead client technical workshops with security architecture, CISO, infrastructure, application and enterprise architecture teams.
• Guide pilot scope selection and validate whether migration designs are implementable and aligned to standards.
• Mentor consultants and engineering specialists on PQC, cryptographic risk and client delivery methods.

Skills

RSA & ECC

TLS/SSL expertise

Cloud security

Threat modeling

Cryptographic risk

Tools

OpenSSL

liboqs

PKCS#11

KMS/HSM

Job description

10-14 years overall experience; at least 5-7 years in cybersecurity, cryptography, PKI, cloud security, security architecture, or applied cryptographic engineering.

Lead quantum-safe architecture, risk analysis, hybrid cryptography design and migration planning across applications, infrastructure, cloud, PKI, keys and certificates.

Role Purpose

10-14 years overall experience; at least 5-7 years in cybersecurity, cryptography, PKI, cloud security, security architecture, or applied cryptographic engineering.

Lead quantum-safe architecture, risk analysis, hybrid cryptography design and migration planning across applications, infrastructure, cloud, PKI, keys and certificates.

Key Responsibilities

• Lead crypto discovery strategy across applications, infrastructure, cloud platforms, network protocols, certificates, keys and signing workflows.
• Define quantum-risk assessment method covering RSA, ECC, TLS, SSH, IPsec, code signing, PKI, HSM/KMS, data confidentiality and integrity exposure.
• Design crypto-agility target architecture, hybrid cryptography strategy and reference migration patterns.
• Review discovery findings and convert them into prioritized remediation roadmaps.
• Lead client technical workshops with security architecture, CISO, infrastructure, application and enterprise architecture teams.
• Guide pilot scope selection and validate whether migration designs are implementable and aligned to standards.
• Mentor consultants and engineering specialists on PQC, cryptographic risk and client delivery methods.

Required Skills

• Strong understanding of RSA, ECC, PKI, X.509, TLS/SSL, SSH, IPsec, digital signatures, certificate lifecycle, HSM and KMS concepts.
• Hands-on familiarity with security architecture, threat modeling, cloud security and enterprise cryptographic controls.
• Working knowledge of NIST PQC standards, ML-KEM/Kyber, ML-DSA/Dilithium, SLH-DSA/SPHINCS+ and hybrid migration patterns.
• Ability to create reference architectures, migration roadmaps, risk scoring models and executive-ready technical narratives.

Preferred / Advantageous Skills

• Exposure to BFS security environments, regulated workloads, payment systems, identity platforms or high-value data protection programs.
• Experience with OpenSSL, liboqs, PQClean, Bouncy Castle, PKCS#11, cloud KMS/HSM platforms or cryptographic tooling.
• Familiarity with NIST, FIPS, ETSI, CNSA 2.0 and sector-specific regulatory expectations.

Expected Deliverables / Outputs

• Quantum-risk assessment approach
• Crypto-agility reference architecture
• Hybrid crypto design patterns
• Prioritized migration roadmap
• Client workshop outputs and architecture assurance notes

Reinvent your world.We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.