Cybersecurity Tech Lead - IAM & Zero-Trust Architect

BrightClaim; México; Hybrid; MXN 900,000 - 1,300,000; Full time

Job summary

Genpact is seeking a Tech Lead in cybersecurity to architect secure, multi-tenant SaaS environments from design to implementation. You will own IAM policies, encryption strategy, and tenant isolation, partnering with engineering to ensure secure-by-design delivery.

The role requires hands-on AWS IAM, KMS, Cognito, VPC security, and governance aligned to ISO 27001 and IEC 62443. You will lead security controls for APIs, data segregation, monitoring, and incident response, embracing zero-trust and

Qualifications

• Define and implement end-to-end security architecture for a multi-tenant SaaS platform.
• Own IAM policies, KMS encryption strategy, tenant isolation models.
• Design security controls for API access, data segregation, and platform services.
• Ensure ISO 27001, IEC 62443 compliance and cloud security best practices.

Responsibilities

• Work closely with engineering teams to enforce secure-by-design development.
• Define audit, logging, monitoring, and incident response frameworks.
• Implement least-privilege access and zero-trust architecture principles.
• Hands-on experience with AWS IAM, KMS, Cognito, VPC security, and tooling.
• Secure external SaaS platforms handling sensitive IP data.

Skills

IAM

Cloud Security

Security Architecture

Zero Trust

Incident Response

Forensics

Audit & Logging

ISO 27001

Education

Bachelors - Computer Science

Bachelors - Cybersecurity

Bachelors - Information Systems

Bachelors - Information Technology

Masters - Computer Science

Tools

AWS IAM

KMS

Cognito

VPC Security

Job description

Genpact is seeking a Tech Lead in cybersecurity to architect secure, multi-tenant SaaS environments from design to implementation. You will own IAM policies, encryption strategy, and tenant isolation, partnering with engineering to ensure secure-by-design delivery.

The role requires hands-on AWS IAM, KMS, Cognito, VPC security, and governance aligned to ISO 27001 and IEC 62443. You will lead security controls for APIs, data segregation, monitoring, and incident response, embracing zero-trust and