Manager - Cloud Technologies S 4D - Genpact

Ready to turn bold ideas into real-world impact? At Genpact, we don’t just adapt to change, we lead it. AI and digital innovation are transforming the way businesses work, and we’re at the forefront of it. Genpact’s AI Gigafactory, our industry-first accelerator, exemplifies how we scale advanced technology solutions to help global enterprises work smarter, grow faster, and transform at scale. Whether tackling complex challenges through large-scale models or agentic AI, our breakthrough solutions tackle companies’ most complex challenges. If you thrive in a fast-moving, innovation-driven environment, love building and deploying cutting-edge AI solutions, and want to push the boundaries of what’s possible, this is your moment. Genpact (NYSE: G) is an agentic and advanced technology solutions company. We leverage process intelligence and artificial intelligence to deliver measurable outcomes. With a strong partner ecosystem and decades of client trust, we provide innovative solutions that transform how businesses run. Powered by a team with an active learning mindset and client centricity at its core, we deliver lasting value for the world’s leading enterprises. Get to know us at genpact.com and on LinkedIn, YouTube, X, and Facebook.

Job Description

Key Responsibilities

Bring-Your-Own Storage (BYOS) Management

• Own the complete lifecycle and security posture of NH2030-supplied Azure Storage Accounts registered as Unity Catalog external locations in ADP Databricks
• Configure storage firewall rules, Private Endpoints, and IP allowlists for BYOS storage accounts
• Set up and manage geo-replication and failover decisions for BYOS storage
• Enable and configure Defender for Storage on all BYOS accounts
• Manage Customer-Managed Keys (CMK) for BYOS storage encryption
• Configure container-level ACLs, SAS token policies, and key rotation schedules
• Enable immutability (WORM) locks and resource locks on BYOS storage containers as required by data classification
• Enable and manage Malware Scanning on BYOS storage accounts
• Own BYOS storage cost management, capacity planning, Azure Monitor alerts, and operational runbooks

Key Vault & Secret Management

• Coordinate with AzTech for provisioning of ADP-managed Key Vaults (minimum 1 per OE per stage)
• Configure Databricks KV-backed secret scopes using the provisioned Key Vaults
• Store and manage initial secrets required for storage access, external service connections, and API keys
• Implement and enforce secret rotation policies; ensure no credentials are stored in notebooks or code
• Configure Key Vault access policies and RBAC for the NH2030 Service Principals and team members
• Manage BYOS-specific Key Vault for CMK: RSA 4096, automated rotation, purge protection

Service Principal (SP) Lifecycle – Entra ID