Senior Staff Cyber Security Architect

GE Healthcare Private Limited; Karnataka; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

GE HealthCare is seeking a Senior Staff Cyber Security Architect to lead security design across Linux, Kubernetes, and cloud platforms, aligning with the product roadmap and automation initiatives.

The role emphasizes threat modeling, secure-by-design practices, and integration of security into CI/CD pipelines, while collaborating with product teams and engineers to deliver secure, scalable solutions.

Qualifications

• Bachelor’s degree in Computer Science or STEM with significant cybersecurity experience.
• 14+ years of experience in cybersecurity or security architecture.
• Deep expertise in Linux and Kubernetes security, including RBAC and container security.
• Strong knowledge of identity, PKI, TLS/mTLS, and zero-trust concepts.
• Experience designing DevSecOps and Security-as-Code within CI/CD pipelines.

Responsibilities

• Drive endpoint security initiatives across Linux, Kubernetes, applications and cloud platforms.
• Partner with product management and architects to identify and prioritize security features.
• Design and implement automation to transform products with orchestration opportunities.
• Integrate security controls into native development workflows and risk management practices.
• Develop service-oriented infrastructure platforms with reusable components for orchestration.
• Research emerging tech and trends to support project development and operations.

Skills

Linux security

Kubernetes security

Zero Trust

DevSecOps

Threat modeling

Education

Bachelor’s degree in Computer Science or STEM

Tools

GitLab CI

OPA/Rego

Kyverno

Helm

Vault/Keycloak

Job description

Sr. Staff Cyber Security Architect Job Description Summary

This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives.

Roles and Responsibilities

• Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
• Partner with product management, product owners and architects to identify & prioritize security features across the system.
• Work to design implement projects to transform products within the portfolio through automation orchestration opportunities.
• A focus on automation & orchestration and furthering the integration of Cyber Security & Risk management into the native development workflow.
• Contribute to the development of infrastructure platforms that are service-oriented with reusable components that can be orchestrated together into different methods for different businesses
• Participate in the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support actives.

Technical Qualification

• Deep experience in Linux and Kubernetes security , including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.
• Strong expertise in Identity, PKI and Zero Trust , including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak/OpenPKI/Vault .
• Strong knowledge of software supply-chain security , including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling .
• Experience designing DevSecOps and Security-as-Code , integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.
• Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.
• Experience with network, API and communication security , including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.
• Experience with runtime security, audit logging and security monitoring , preferably across Kubernetes and distributed edge systems.
• Ability to architect security across edge, customer datacenter and cloud deployments .
• Strong understanding of medical-device cybersecurity and secure product development , including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.

Education Qualification

Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with significant experience in Cybersecurity domain with a minimum of 14 years of experience.

Desired Characteristics

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Strong interpersonal skills, with an emphasis on the ability to effectively influence others
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner.
• Hands-on architecture mindset , capable of building reusable security capabilities into the Compute Platform rather than relying only on governance, reviews and compliance processes.

Inclusion and Diversity

GE HealthCare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

Behaviors

We expect all employees to live and breathe our behaviors: to act with humility and build trust; lead with transparency; deliver with focus; and drive ownership, always with unyielding integrity.

Additional Information

• Relocation Assistance Provided: No
• Experience Level Senior Level