Sr. Staff Cyber Security Architect

I00M05 Wipro GE Healthcare Private Limited; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

GE HealthCare seeks an experienced security architect to lead identity, Linux/Kubernetes security, and zero-trust initiatives across cloud and edge deployments. You will shape secure product development, architect scalable security platforms, and drive DevSecOps practices within the engineering teams.

The role requires deep domain knowledge in cybersecurity for medical devices, risk management, and compliance alignment with industry standards.

Qualifications

• Deep experience in Linux and Kubernetes security, including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.
• Strong expertise in Identity, PKI and Zero Trust, including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak/OpenPKI/Vault.
• Strong knowledge of software supply-chain security, including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling.
• Experience designing DevSecOps and Security-as-Code, integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.
• Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.
• Experience with network, API and communication security, including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.
• Experience with runtime security, audit logging and security monitoring, preferably across Kubernetes and distributed edge systems.
• Ability to architect security across edge, customer datacenter and cloud deployments.
• Strong understanding of medical-device cybersecurity and secure product development, including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.

Responsibilities

• Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
• Partner with product management, product owners and architects to identify & prioritize security features across the system.
• Work to design implement projects to transform products within the portfolio through automation orchestration opportunities.
• A focus on automation & orchestration and furthering the integration of Cyber Security & Risk management into the native development workflow.
• Contribute to the development of infrastructure platforms that are service-oriented with reusable components that can be orchestrated together into different methods for different businesses
• Participate in the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support actives.

Skills

Linux security

Kubernetes security

Identity PKI

Zero Trust

SBOM & CVE mgmt

SAST/SCA

DevSecOps

Security as Code

Threat modeling

Network security

API security

Cloud security

Medical device cybersecurity

Education

Bachelor's Degree in Computer Science or STEM Majors

Tools

Keycloak/OpenPKI/Vault

Trivy

Black Duck

Cosign/Sigstore

GitLab security tooling

GitLab CI

OPA/Rego

Kyverno

Helm

Job description

Job Description Summary

This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives.

Job Description Roles and Responsibilities

In this role, you will:

• Drive significant endpoint security technology initiatives across multiple layers of architecture, including Linux, Kubernetes, Application, and Cloud platforms.
• Partner with product management, product owners and architects to identify & prioritize security features across the system.
• Work to design implement projects to transform products within the portfolio through automation orchestration opportunities.
• A focus on automation & orchestration and furthering the integration of Cyber Security & Risk management into the native development workflow.
• Contribute to the development of infrastructure platforms that are service-oriented with reusable components that can be orchestrated together into different methods for different businesses
• Participate in the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support actives.

Technical Qualification

Deep experience in Linux and Kubernetes security, including OS hardening, container security, RBAC, workload isolation, secure boot and runtime protection.

Strong expertise in Identity, PKI and Zero Trust, including OAuth2/OIDC, certificates, TLS/mTLS, key management, workload identity and technologies such as Keycloak/OpenPKI/Vault.

Strong knowledge of software supply-chain security, including SBOM, CVE/VEX management, SAST/SCA, container scanning, artifact signing, software provenance and tools such as Trivy, Black Duck, Cosign/Sigstore and GitLab security tooling.

Experience designing DevSecOps and Security-as-Code, integrating automated security controls into CI/CD using tools such as GitLab CI, OPA/Rego, Kyverno, Helm and infrastructure-as-code.

Strong security architecture and threat-modeling capability using techniques such as STRIDE, attack-surface analysis, trust-boundary analysis and secure-design patterns.

Experience with network, API and communication security, including network segmentation, API gateways, secure remote connectivity, TLS/mTLS and Zero Trust networking.

Experience with runtime security, audit logging and security monitoring, preferably across Kubernetes and distributed edge systems.

Ability to architect security across edge, customer datacenter and cloud deployments.

Strong understanding of medical-device cybersecurity and secure product development, including FDA cybersecurity expectations, IEC 81001-5-1, IEC 62304, NIST SSDF and related risk-management practices.

Education Qualification

Bachelor's Degree in Computer Science or "STEM" Majors (Science, Technology, Engineering and Math) with significant experience in Cybersecurity domain with a minimum of 14 years of experience.

Desired Characteristics

Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.

Strong interpersonal skills, with an emphasis on the ability to effectively influence others A team-focused mentality with the proven ability to work effectively with diverse stakeholders.

An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily-understood, authoritative, and actionable manner.

Hands-on architecture mindset, capable of building reusable security capabilities into the Compute Platform rather than relying only on governance, reviews and compliance processes.

Inclusion and Diversity

GE HealthCare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

Behaviors

We expect all employees to live and breathe our behaviors: to act with humility and build trust; lead with transparency; deliver with focus; and drive ownership, always with unyielding integrity.

Additional Information

Relocation Assistance Provided: No

At GE HealthCare, we see possibilities through innovation. We're partnering with our customers to fulfill healthcare's greatest potential through groundbreaking medical technology, intelligent devices, and care solutions. Better tools enabling better patient care. Together, we are not only building a healthier future but living our purpose to create a world where healthcare has no limits.