Machine Identity Service Architect

Atos; Bengaluru; Vor Ort; INR 3.500.000 - 5.500.000; Vollzeit

Zusammenfassung

Atos in Bengaluru is seeking a Senior Security Architect to lead identity and PKI programs, shaping reference architectures, guiding platform evaluations, and defining secure certificate management across critical environments.

You will own workload identity, PKI governance, and mTLS strategies, with deep Kubernetes and cloud IAM experience, collaborating with global teams to protect data, identities, and compliant digital infrastructures.

Qualifikationen

• Design and productise identity or PKI services with reference architecture and platform evaluation.
• Hands-on HSM and key custody practices, including witnessed ceremonies.
• Define enrolment/renewal protocols (ACME, EST, SCEP, CMP, MS auto-enrolment).
• Experience with Microsoft AD CS and at least one trust vendor (EJBCA, Entrust, DigiCert).
• Manage CLM platforms like Idira, Keyfactor, AppViewX or DigiCert Trust Lifecycle.
• Implement workload identity using SPIFFE/SPIRE and cluster-to-cloud federation.
• Administer Kubernetes and cloud IAM (Azure, AWS, GCP).
• Oversee machine identity governance: service accounts, OAuth grants, API keys.
• Plan crypto agility and post-quantum migration strategies.

Kenntnisse

Identity PKI design

HSM & key custody

Enrollment protocols

AD CS

Certificate lifecycle

Workload identity

Kubernetes admin

Identity governance

Post-quantum crypto

IDnomic

Identity governance tools

Crypto discovery tooling

Secrets management

Jobbeschreibung

Select how often (in days) to receive an alert:

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

Must have skills

• Architected and productised identity or PKI services (reference architecture, platform evaluation and selection, service definition), not implementation only
• HSM and key custody: PKCS#11, FIPS 140-3, and hands‑on participation in a witnessed key ceremony
• Enrolment and renewal protocols: ACME, EST, SCEP, CMP, Microsoft auto‑enrolment
• Microsoft AD CS, plus at least one of EJBCA, Entrust, DigiCert
• CLM platforms: Idira Certificate Manager (formerly Venafi), Keyfactor, AppViewX, DigiCert Trust Lifecycle Manager
• Workload identity: SPIFFE/SPIRE, Kubernetes service account tokens, cluster‑to‑cloud identity federation (IRSA, Azure Workload Identity, GKE), mTLS and service mesh
• Kubernetes at administrator depth and cloud IAM (Azure, AWS, GCP)
• Machine identity governance: service accounts, managed identities, service principals, OAuth application grants, API keys; ownership inference and scope reduction
• Post‑quantum cryptography and cryptographic inventory: NIST FIPS 203/204/205, hybrid certificates, migration planning, crypto‑agility

Good to have

• IDnomic experience
• Machine identity governance platforms (Cisco/Astrix, Entro, Natoma, Oasis, SailPoint or Saviynt non‑human identity)
• Cryptographic discovery tooling (Keyfactor/InfoSec Global, SandboxAQ)
• Secrets management platforms (Vault, Akeyless) at the integration boundary

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.