IT / Application Architect - OpenShift Platform

Job Description:

Job Description
Role: IT / Application Architect - OpenShift Platform
Number of Positions: 1
Location: Bangalore, India
Description
Airbus Commercial Aircraft is looking for an IT Architect to join our Aircraft Test and Delivery department based in Bangalore, India.
You will be part of a team developing applications in the scope of an initiative for a collaborative platform supporting “Customer Line” operations and Customer relationships all along the aircraft Acceptance & Delivery process.

This PSL embedding the products used for :
• The activities related to the technical progress of the Production Aircrafts for the activities managed in the delivery center, in the flight line for ALL programs and for ALL Sites:Toulouse / Tianjin / Mobile / Hamburg / Mirabel
• The products and means used to communicate with the customer during the delivery of the aircraft that he is purchasing: Invitations, Orientation during visits in Plant/FAL,Technical Status, Request of Rework, planning dates, ...relying on the data which are managed within other Business Products
• The product & tools used to measure & drumbeat the progress of the Aircraft from end of manufacturing to delivery of the Aircraft: prioritization of Aircraft, Live technical status, escalation of critical Items, allocation/management of teams, efficiency of Actors
• The preparation & execution of the tests of the aircrafts on production Aircrafts: Noise detection, scheduling of flights, preparation of flights
Within the Digital & IM organization, we are seeking a highly experienced and passionate IT / Application Architect specializing in RedHat OpenShift (OCP 4) to join our team in Bangalore, India. You will play a pivotal role in designing, architecting, and modernizing cloud-native microservices, hybrid container platforms, and edge/PWA application topologies.
In this role, you will collaborate with cross-functional Agile teams, enterprise architects, and engineering leads to deliver secure, resilient, and high-performing enterprise application solutions.

Qualifications & Experience
• Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related discipline.
• Experience: 10 - 14+ years of total IT experience with at least 5-8 years of experience designing, architecting, and operating complex enterprise applications and containerized platform topologies.
• Agile Expertise: Minimum 2-3 years working in cross-functional Agile/SAFe or Scrum teams from inception through release.
• Language: Advanced proficiency in English (verbal and written).

Technical Skills & Requirements
1. Platform & Runtime Architecture
• RedHat OpenShift (OCP 4): Extensive hands-on design and architecture experience scaling cluster states across OCP namespaces, optimizing Horizontal Pod Autoscalers (HPA), and configuring Pod Disruption Budgets (PDB).
• RedHat Source-to-Image (S2I): Proven ability to manage production artifact builds leveraging RedHat Universal Base Images (UBI9).
• Runtimes & Servers: Deep architectural knowledge of Java (OpenJDK 17, Spring, Quarkus) for microservices and batch systems, NodeJS 24 / ReactJS / Redux for front-end platforms, as well as Apache HTTPd 2.4 & Tomcat 10 for reverse proxying, valve logging, and runtime baselines.

2. System Design & Edge / PWA Topology
• Local-First Storage Patterns: Capability to architect high-availability offline-capable web apps using browser-based storage patterns (IndexedDB).
• Offline Data Synchronization: Design offline action capture to perform synchronization through replay-mode, validating operations using cryptographic signatures
• Layered Gateway Topologies & APIs: Building decoupled API fabrics and API Gateways to govern curated internal datasets safely out to consumer boundaries.

3. DevSecOps, Identity & Compliance
• Federated Identity & SSO: Expertise in managing enterprise Single Sign-On (SSO) bridges, OAuth 2.0 / OpenID Connect (OIDC) over MobileSSO for both user (U2M) and machine (M2M) authentication.
• Peer-to-Peer Cryptography: Implementing cross-component token isolation utilizing signed and encrypted JSON Web Encryption (JWE) tokens via custom key configurations.
• Logical Export Controls: Implementing logical workspace borders separating restricted datasets (e.g., military ITAR data) based on contextual program variables.
• Segregated Audit Logging: Design dedicated log routing and indexing to maintain secure audit trails separate from standard application operational logs.

4. CI/CD & Automation
• Ansible Automation Platform: Writing infrastructure-as-code playbooks and managing cluster credentials securely via Ansible Vault.
• Pipeline Engineering: Constructing automated multi-stage compilation workflows using Jenkins pipelines integrated with enterprise GitHub repositories.
• DevSecOps Integration: Injecting static security inspection tools (SonarQube, CheckmarxOne, DefectDojo) into routine CI/CD pipelines.

5. Data & Core Infrastructure
• Oracle DB Topology: Configuring high-availability SQL*Net database connections targeting remote Oracle virtual instances bound to active Data Guard pools.
• Multi-Protocol Volumes: Mounting cluster-external network file spaces utilizing SFTP, NFS v4, or SMB/CIFS combined with active Kerberos validation.
• Perimeter Firewalls & Proxies: Designing and monitoring data pipelines traversing Data Center Filtering (DCF) firewalls and AxessGate proxy publication pathways.

Nice-to-Have Requirements
• Network Segregation: Experience restructuring container topologies to partition high-volume automated Machine-to-Machine (M2M) traffic separate from User-to-Machine (U2M) endpoints.
• NoSQL & Caching: Experience supporting persistence over MongoDB clusters and memory-based engine Redis.
• Relational Databases: Broad experience connecting microservices directly via SQL*Net to highly available PostgreSQL and Oracle instances.

Responsibilities & Tasks
• Solution Architecture & Design: Define and validate solution and application architectures for new and existing IT products using RedHat OpenShift (OCP 4) and cloud infrastructure.
• Dossier & Blueprint Authoring: Produce Architectural Requirement Dossiers (ARD) detailing logical, physical, network, and security layers using Archimate or standard UML modeling.
• Security & Compliance: Ensure full adherence to cyber security standards, zero-trust concepts, export control regulations (EC, Dual-Use, ITAR), and audit logging requirements.
• Stakeholder & Community Alignment: Collaborate with Enterprise Architects, Product Owners, and DevOps teams to align technical choices with business strategies.
• Mentoring & Leadership: Guide development and operations teams on cloud-native best practices, design patterns, and clean code principles.
• Innovation & Lifecycle Management: Evaluate new technologies and tools to continually optimize cost, performance, scalability, and maintainability.

Success Metrics
• Quality & On-Time Delivery: Consistently deliver high-quality ("first-time-right") architectural solutions on schedule.
• Innovation & Cost Optimization: Propose cost-effective, innovative application and infrastructure solutions.
• Customer & Stakeholder Satisfaction: Achieve high satisfaction levels from business domains and global enterprise IT partners.
• Team Synergy: Foster strong collaboration across local and international cross-functional teams.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company:
Airbus India Private Limited

Employment Type:
Permanent
-------

Experience Level:
Professional

Job Family:
Digital

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com .

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.