Machine Identity Service Architect

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.
With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.
A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.
About Atos Group
Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.
Must Have Skills
Architected and productised identity or PKI services (reference architecture, platform evaluation and selection, service definition), not implementation only
PKI at design depth X.509/RFC 5280, CA hierarchy design, certificate profiles, CP/CPS, revocation (CRL/OCSP), audit frameworks (WebTrust, ETSI)
HSM and key custody PKCS#11, FIPS 140-3, and hands-on participation in a witnessed key ceremony
Enrolment and renewal protocols ACME, EST, SCEP, CMP, Microsoft auto-enrolment
Microsoft AD CS, plus at least one of EJBCA, Entrust, DigiCert
CLM platforms Idira Certificate Manager (formerly Venafi), Keyfactor, AppViewX, DigiCert Trust Lifecycle Manager
Workload identity SPIFFE/SPIRE, Kubernetes service account tokens, cluster-to-cloud identity federation (IRSA, Azure Workload Identity, GKE), mTLS and service mesh
Kubernetes at administrator depth and cloud IAM (Azure, AWS, GCP)
Machine identity governance service accounts, managed identities, service principals, OAuth application grants, API keys; ownership inference and scope reduction
Post-quantum cryptography and cryptographic inventory NIST FIPS 203/204/205, hybrid certificates, migration planning, crypto-agility
Good to have
IDnomic experience
Machine identity governance platforms (Cisco/Astrix, Entro, Natoma, Oasis, SailPoint or Saviynt non-human identity)
Cryptographic discovery tooling (Keyfactor/InfoSec Global, SandboxAQ)
Secrets management platforms (Vault, Akeyless) at the integration boundary
Work Location Mumbai & Bangalore
Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.
Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.
Choose your future. Choose Atos.

Work arrangement
No