Senior Specialist - Architecture

LTM; Phoenix (AZ); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive Medical Plan

Disability Coverage

401(k) Plan with Company match

Life Insurance

Vacation & Paid Holidays

Parental Leave

Job summary

LTIMindtree is seeking a Cloud Security Consultant focused on data security architecture assessment for GCP-based conversational AI and backend integration. You will evaluate end-to-end architecture from a data security and privacy perspective, reviewing IAM, VPC, interconnects, and encryption.

Responsibilities include implementing Sentinel policies, database activity monitoring, AI-specific risk assessments, and producing remediation-rich findings. A strong GCP background is required.

Qualifications

• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of GCP IAM, VPC Shared VPC, Cloud Run, GKE, BigQuery, Cloud Storage, Datastore, Firestore, Cloud KMS, Secret Manager.
• Experience assessing data protection controls for PII/regulated customer data.
• Knowledge of API security including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
• Familiarity with logging, SIEM integration, audit trails, and security monitoring.

Responsibilities

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies to enforce encryption and data access standards; implement database activity monitoring and blocking rules in GCP.
• Assess AI-specific risks including prompt-context leakage, model input/output handling, and knowledge store access.
• Produce findings reports with risk ratings, gaps, and remediation recommendations.
• Review data flows across GCP service projects; evaluate virtual agents, conversational AI, and telephony platform APIs.

Skills

Cloud security

Threat modeling

Data protection controls

API security

Logging & monitoring

Tools

GCP IAM

VPC Shared VPC

Cloud Run

GKE

BigQuery

Cloud Storage

Datastore

Firestore

Cloud KMS

Secret Manager

Job description

Role Description

Data Security Architecture Assessment

Cloud Security Consultant.

Focus Security assessment of GCP based conversational AI telephony API and backend integration architecture.

Responsibilities

Assess the endtoend architecture from a data security and privacy standpoint .

Review security controls for GCP Shared VPC interconnects service accounts IAM and network segmentation.

Implement Sentinel policies for enforcing encryption standards and data access standardsImplement database activity monitoring and blocking rules in GCP.

Assess AI specific risks including promptcontext leakage model inputoutput handling and knowledge store access.

Produce findings report with risk ratings gaps and remediation recommendations.

Review data flows across GCP service projects.

Virtual agents conversational AI Telephony platforms API proxies.

Datastore BigQuery Cloud Storage Onprem systems of recordIdentify risks related and implement controls related to Blocking.

Customer data exposure PII handling.

Encryption in transit and at rest.

Secrets and key management Users and NHI authentication.

Database activity Logging monitoring and auditability.

Data retention and deletion

Required Skills

Strong experience in cloud security architecture preferably Google Cloud Platform.

Hands on knowledge of GCP IAM VPC Shared VPC Cloud Run GKE Big Query Cloud Storage Datastore Fire store Cloud KMS Secret Manager

Experience assessing data protection controls for PII PCI or regulated customer data.

Knowledge of API security including OAuth mTLS token handling gateways and service to service authentication.

Familiarity with network security private connectivity firewalls segmentation and hybrid cloud interconnects.

Understanding of logging SIEM integration audit trails and security monitoring.

Experience with threat modeling and architecture risk reviews.

Preferred Skills

Experience with conversational AI virtual agent platforms.

Knowledge of telephony SIP integrations and contact center platforms.

Experience with PCI DSS NIST ISO 27001 SOC 2 or financial services security standards.

Familiarity with AI data governance model safety and GenAI security risks.

Other Details

Actual compensation within the range will be dependent upon the individual's skills, experience, performance and internal equity.

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree (“LTIM”):

Benefits And Perks

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

Disclaimer

The compensation and benefits information provided herein is accurate as of the date of this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.