Within the Digital & IM organization, we are seeking a highly experienced and passionate IT / Application Architect specializing in RedHat OpenShift (OCP 4) to join our team in Bangalore, India. You will play a pivotal role in designing, architecting, and modernizing cloud-native microservices, hybrid container platforms, and edge/PWA application topologies.
In this role, you will collaborate with cross-functional Agile teams, enterprise architects, and engineering leads to deliver secure, resilient, and high-performing enterprise application solutions.
Qualifications & Experience
Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related discipline.
Experience: 10 - 14+ years of total IT experience with at least 5–8 years of experience designing, architecting, and operating complex enterprise applications and containerized platform topologies.
Agile Expertise: Minimum 2-3 years working in cross-functional Agile/SAFe or Scrum teams from inception through release.
Language: Advanced proficiency in English (verbal and written).
Technical Skills & Requirements
1. Platform & Runtime Architecture
RedHat OpenShift (OCP 4): Extensive hands-on design and architecture experience scaling cluster states across OCP namespaces, optimizing Horizontal Pod Autoscalers (HPA), and configuring Pod Disruption Budgets (PDB).
RedHat Source-to-Image (S2I): Proven ability to manage production artifact builds leveraging RedHat Universal Base Images (UBI9).
Runtimes & Servers: Deep architectural knowledge of Java (OpenJDK 17, Spring, Quarkus) for microservices and batch systems, NodeJS 24 / ReactJS / Redux for front-end platforms, as well as Apache HTTPd 2.4 & Tomcat 10 for reverse proxying, valve logging, and runtime baselines.
2. System Design & Edge / PWA Topology
Local-First Storage Patterns: Capability to architect high-availability offline-capable web apps using browser-based storage patterns (IndexedDB).
Offline Data Synchronization: Design offline action capture to perform synchronization through replay-mode, validating operations using cryptographic signatures
Layered Gateway Topologies & APIs: Building decoupled API fabrics and API Gateways to govern curated internal datasets safely out to consumer boundaries.
3. DevSecOps, Identity & Compliance
Federated Identity & SSO: Expertise in managing enterprise Single Sign-On (SSO) bridges, OAuth 2.0 / OpenID Connect (OIDC) over MobileSSO for both user (U2M) and machine (M2M) authentication.
Peer-to-Peer Cryptography: Implementing cross-component token isolation utilizing signed and encrypted JSON Web Encryption (JWE) tokens via custom key configurations.
Logical Export Controls: Implementing logical workspace borders separating restricted datasets (e.g., military ITAR data) based on contextual program variables.
Segregated Audit Logging: Design dedicated log routing and indexing to maintain secure audit trails separate from standard application operational logs.
4. CI/CD & Automation
Ansible Automation Platform: Writing infrastructure-as-code playbooks and managing cluster credentials securely via Ansible Vault.
Pipeline Engineering: Constructing automated multi-stage compilation workflows using Jenkins pipelines integrated with enterprise GitHub repositories.
DevSecOps Integration: Injecting static security inspection tools (SonarQube, CheckmarxOne, DefectDojo) into routine CI/CD pipelines.
5. Data & Core Infrastructure
Oracle DB Topology: Configuring high-availability SQL*Net database connections targeting remote Oracle virtual instances bound to active Data Guard pools.
Multi-Protocol Volumes: Mounting cluster-external network file spaces utilizing SFTP, NFS v4, or SMB/CIFS combined with active Kerberos validation.
Perimeter Firewalls & Proxies: Designing and monitoring data pipelines traversing Data Center Filtering (DCF) firewalls and AxessGate proxy publication pathways.
Nice-to-Have Requirements
Network Segregation: Experience restructuring container topologies to partition high-volume automated Machine-to-Machine (M2M) traffic separate from User-to-Machine (U2M) endpoints.
NoSQL & Caching: Experience supporting persistence over MongoDB clusters and memory-based engine Redis.
Relational Databases: Broad experience connecting microservices directly via SQL*Net to highly available PostgreSQL and Oracle instances.
Responsibilities & Tasks
Solution Architecture & Design: Define and validate solution and application architectures for new and existing IT products using RedHat OpenShift (OCP 4) and cloud infrastructure.
Dossier & Blueprint Authoring: Produce Architectural Requirement Dossiers (ARD) detailing logical, physical, network, and security layers using Archimate or standard UML modeling.
Security & Compliance: Ensure full adherence to cyber security standards, zero-trust concepts, export control regulations (EC, Dual-Use, ITAR), and audit logging requirements.
Stakeholder & Community Alignment: Collaborate with Enterprise Architects, Product Owners, and DevOps teams to align technical choices with business strategies.
Mentoring & Leadership: Guide development and operations teams on cloud-native best practices, design patterns, and clean code principles.
Innovation & Lifecycle Management: Evaluate new technologies and tools to continually optimize cost, performance, scalability, and maintainability.
Success Metrics
Quality & On-Time Delivery: Consistently deliver high-quality ("first-time-right") architectural solutions on schedule.
Innovation & Cost Optimization: Propose cost-effective, innovative application and infrastructure solutions.
Customer & Stakeholder Satisfaction: Achieve high satisfaction levels from business domains and global enterprise IT partners.
Team Synergy: Foster strong collaboration across local and international cross-functional teams.
This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.
Company
Airbus India Private Limited
Employment Type
Permanent
Experience Level
Professional
Job Family
Digital <JF-IM-DI>
By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.
Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com.
At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.
