Enterprise Security Architect

Joining our Eisai GCC - GDBT Team in Vizag

EISAI GCC - Global Digital Business Transformation (GDBT) center in Vizag is our first truly global capability hub providing high quality IT capability services across the globe for various EISAI regions. The center leverages internal critical technical competencies to engineer, build, secure, and operate consolidated cost optimized global infrastructure platforms supporting our human health care (hhc) mission

Position Overview

Defines secure-by-default architecture standards and roadmaps across Azure/AWS, endpoint, and network security for global environments.

Key Responsibilities

• Multi-cloud security architecture (Azure & AWS): Design security patterns and guardrails that ensure a consistent security posture across cloud platforms (identity, network, logging, encryption, and workload protection).
• Endpoint security architecture: Define endpoint strategy and standards including hardening baselines, EDR/XDR, and MDM/EMM policies aligned to Zero Trust.
• Network security architecture: Lead designs for NGFW, micro-segmentation, SASE, and SD‑WAN security, ensuring secure connectivity and segmentation across regions.
• Roadmaps & planning: Develop and maintain security roadmaps (including M365 security roadmap where applicable) aligned with business priorities, technology strategy, and regulatory requirements across supported regions.
• Standards & reference architectures: Maintain domain reference architectures, standards, and reusable patterns; translate frameworks (e.g., NIST, CIS) into actionable technical requirements and baselines.
• Stakeholder & regional alignment: Partner with regional teams (USA, Japan, EMEA/UK, China) to incorporate local compliance needs and operational constraints into global designs.
• Technical assessments & PoCs: Evaluate emerging security capabilities, run proof-of-concepts, and recommend adoption based on risk reduction, fit, and operational impact.
• Engineering guidance: Provide implementation directions to Infrastructure Security Engineers, including design reviews, solution options, and rollout approaches.
• Executive communication: Present architecture decisions, roadmap progress, and key risk tradeoffs to leadership and stakeholders.
• Automation & orchestration: Drive security automation opportunities (policy-as-code, baseline enforcement, workflow orchestration) to improve consistency and operational efficiency.
• Architecture documentation: Produce clear technical architecture diagrams (end-to-end and layered views) and maintain decision records for traceability.

Skills

• Cloud security fundamentals (Azure and/or AWS): IAM basics, network security concepts, logging/monitoring, encryption/key management, and secure configuration patterns
• Endpoint security: EDR/XDR concepts, endpoint hardening baselines, and MDM/EMM policy familiarity (e.g., Microsoft Defender for Endpoint, Intune concepts)
• Network security concepts: NGFW, segmentation/micro-segmentation, secure remote access (ZTNA/SASE concepts), and SD‑WAN security basics
• Security standards & baselines: Ability to interpret and apply CIS benchmarks and map framework requirements (NIST/ISO awareness) into technical controls
• Architecture documentation: Creating and maintaining reference patterns, decision records, and clear technical diagrams
• Automation mindset: Familiarity with policy/guardrail approaches (e.g., Azure Policy/AWS Organizations concepts) and basic scripting (PowerShell/Python) is a plus
• Collaboration: Comfortable working across regions/time zones and communicating technical decisions to mixed audiences

Education

• Bachelor's degree in computer science or related field.

Certification

• Security: CompTIA Security+, Microsoft AZ‑500 (Azure Security), AWS Solutions Architect