Infrastructure Security Architect

Joining our GDBT Team in Vizag

EISAI Global Digital Business Transformation (GDBT) center in Vizag is our first truly global

capability hub providing high quality IT capability services across the globe for various EISAI

regions. The center leverages internal critical technical competencies to engineer, build, secure,

and operate consolidated cost optimized global infrastructure platforms supporting our human

health care (hhc) mission

Position Overview

Defines secure-by-default architecture standards and roadmaps across Azure/AWS, endpoint,

and network security for global environments.

Key Responsibilities

 Multi-cloud security architecture (Azure & AWS): Design security patterns and

guardrails that ensure a consistent security posture across cloud platforms (identity,

network, logging, encryption, and workload protection).

 Endpoint security architecture: Define endpoint strategy and standards including

hardening baselines, EDR/XDR, and MDM/EMM policies aligned to Zero Trust.

 Network security architecture: Lead designs for NGFW, micro-segmentation, SASE,

and SDWAN security, ensuring secure connectivity and segmentation across regions.

 Roadmaps & planning: Develop and maintain security roadmaps (including M365

security roadmap where applicable) aligned with business priorities, technology

strategy, and regulatory requirements across supported regions.

 Standards & reference architectures: Maintain domain reference architectures,

standards, and reusable patterns; translate frameworks (e.g., NIST, CIS) into actionable

technical requirements and baselines.

 Stakeholder & regional alignment: Partner with regional teams (USA, Japan,

EMEA/UK, China) to incorporate local compliance needs and operational constraints into

global designs.

 Technical assessments & PoCs: Evaluate emerging security capabilities, run proof-of-

concepts, and recommend adoption based on risk reduction, fit, and operational impact.

 Engineering guidance: Provide implementation directions to Infrastructure Security

Engineers, including design reviews, solution options, and rollout approaches.

 Executive communication: Present architecture decisions, roadmap progress, and key

risk tradeoffs to leadership and stakeholders.

 Automation & orchestration: Drive security automation opportunities (policy-as-code,

baseline enforcement, workflow orchestration) to improve consistency and operational

efficiency.

 Architecture documentation: Produce clear technical architecture diagrams (end-to-

end and layered views) and maintain decision records for traceability.

Skills

 Cloud security fundamentals (Azure and/or AWS): IAM basics, network security

concepts, logging/monitoring, encryption/key management, and secure configuration

patterns

 Endpoint security: EDR/XDR concepts, endpoint hardening baselines, and MDM/EMM

policy familiarity (e.g., Microsoft Defender for Endpoint, Intune concepts)

 Network security concepts: NGFW, segmentation/micro-segmentation, secure remote

access (ZTNA/SASE concepts), and SDWAN security basics

 Security standards & baselines: Ability to interpret and apply CIS benchmarks and map

framework requirements (NIST/ISO awareness) into technical controls

 Architecture documentation: Creating and maintaining reference patterns, decision

records, and clear technical diagrams

 Automation mindset: Familiarity with policy/guardrail approaches (e.g., Azure Policy/AWS

Organizations concepts) and basic scripting (PowerShell/Python) is a plus

 Collaboration: Comfortable working across regions/time zones and communicating

technical decisions to mixed audiences

Education

 Bachelor’s degree in computer science or related field. 

Certification

• Security: CompTIA Security+, Microsoft AZ500 (Azure Security), AWS Solutions

Architect