Lead Technical Architect (NFR & Security)

About the Role

An exciting opportunity to join the IT - Technology Services team as Lead Technical Architect (Platform, Security - NFR). This role will serve as the lead architect, guiding the strategic direction for secure and seamless application connectivity across the enterprise. Your leadership will ensure that organizational data and applications remain protected, all application integrations meet the highest standards of security and compliance, and application NFR adhere to the standards set. By fostering a culture of proactive risk management and reliability, you will enable the organization to confidently deliver innovative solutions compliant with security standards.

Your duties would include:

• Lead the organization roadmap and own the best practices to be adopted by application teams to improvise the overall security posture of applications.
• Act as product owner for enterprise platforms. Own the platform roadmap, feature adoption, onboarding sequence, and entitlement policies.
• Define and govern platform standards across Azure and GCP, including subscription and project structure, configuration baselines, and deployment architecture, in line with CyberGRC policies.
• Establish and lead FinOps practices across platforms, including cost visibility, tagging, budgeting and forecasting, showback and chargeback to consuming business units, rightsizing, commitment and discount optimization, and license utilization tracking.
• Own the end-to-end platform lifecycle (onboarding, SLA and performance, capacity headroom, change and release governance) while working with Technology Services (operate), CyberGRC (govern), and Vendor Management Office (contracts and renewals).
• Drive platform adoption and enablement across application teams, and measure usage, value, and return on investment.
• Lead, mentor, and set direction for the platform team, including platform architects, DevOps engineers, and program management.
• Ensure application deployment and connectivity architecture is robust to ensure protection of data and compliance with policies.
• Ensure security of mobility solutions on personal / MDM devices aligns with industry best practices and ensure consistent implementation across the enterprise.
• Review and ensure all east-west traffic between applications is honoring the standards with respect to encryption and data protection.
• Establish organizational strategy for maintenance and management of security certificates used across the enterprise at different layers (apps, servers etc.), with minimal cost and operational overheads.
• Lead deep dive troubleshooting for any complex production issues around network, proxy, firewall, and security incidents.
• Lead the organization strategy in handling and management of secrets stored within application servers.
• Ensure solutions proposed are optimized taking into consideration cost & operational overheads.
• Work closely with the cyber governance team to refine the security guidelines on an ongoing basis to ensure IT applications are aligned with the best industry practices.
• Establish and maintain an enterprise NFR framework covering availability, reliability, performance, scalability, observability, maintainability, auditing, and security.
• Define measurable NFR KPIs, SLAs, and SLOs across critical platforms (e.g., web, mobile, API, data, AI workloads).
• Assess and define reference architecture and NFR patterns for multi-cloud, hybrid, and distributed systems (e.g., Azure, GCP, Oracle, Adobe & OnPrem).
• Architect observability solutions using tools like Dynatrace, Prometheus, Grafana, and Azure Monitor.
• Define load and stress testing strategy, ensuring performance validations using tools such as k6, JMeter, or Galing.
• Integrate NFR design principles with data privacy and encryption frameworks (BYOK, Fortanix, Azure Key Vault, TDE).
• Ensure systems meet compliance and audit requirements for data residency, logging, and access control.
• Validate secure integration practices for APIs, event streams, and third-party connectors (APIM, Apigee, MuleSoft, Solace, IBMMQ).
• Collaborate with testing and QA teams to define performance acceptance criteria.
• Establish performance baselines and capacity planning models for mission-critical systems.

Be part of an extraordinary story

Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make. You’ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future and build the life you want while being part of an international community.

Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what’s never been done before. Together, everything is possible.

We are looking for a passionate and experienced professional to join our IT - Technology Services team. The ideal candidate should possess the following:

• Bachelor’s Degree or Honors in Engineering / Computer Science / Mathematics / Sciences or Equivalent.
• 10+ years in architecture or system design roles with 3+ years focused on Application security & NFRs and enterprise platform management.
• Hands-on experience managing and governing Azure and GCP platforms, networking, OpenShift/ARO, Infrastructure-as-Code (e.g., Terraform), and CI/CD.
• Proven FinOps experience, including Azure Cost Management, GCP Billing, cost allocation and chargeback models, commitment-based discounts, and licence optimization.
• Experience running shared enterprise platforms (e.g., event/messaging, integration middleware, AI or developer platforms), including onboarding, entitlement, adoption, and vendor/license management.
• Strong understanding of distributed systems, microservices, and cloud computing.
• Deep experience in performance, scalability, and reliability engineering.
• Hands-on experience with monitoring, logging, and tracing stacks (Dynatrace, ELK, Prometheus, Open Telemetry).
• Familiarity with API gateways, CDN, and WAF technologies (Akamai, Azure Front Door, F5).
• Knowledge of security standards (OAuth, SAML, TLS, encryption-at-rest/in-transit).
• Hands-on experience in identifying and explaining system bottlenecks to the application team for resolution.
• Hands-on experience in identifying application bottlenecks using Dynatrace / ELK APM / AppDynamics tool and explaining the bottlenecks to the application team for resolution.
• Excellent interpersonal, communication, and organizational skills.
• Certifications such as TOGAF, Azure/Google architecture expert.
• Exposure to enterprise sectors like aviation.