About the opportunityWe're looking for an experienced Security Architect to own the security architecture and technology risk posture of Purple Fabric and MSOCK, our enterprise AI platforms.

This is an chance to shape secure product architecture from the ground up, embedding security into the design and development lifecycle rather than treating it as a downstream review.

You'll work closely with architecture, product and engineering teams to establish security standards across enterprise AI, cloud, hybrid and customer-hosted environments.

What you will own1. Secure Product Architecture

- Define security patterns and trust boundaries across SaaS, customer-hosted, cloud, hybrid and on-premises deployments.
- Partner with architects and engineering teams throughout the product lifecycle, from design to production.

2. AI and Agentic Security

- Design controls for prompt injection, tool/MCP access, excessive agency, model and data leakage, RAG poisoning, agent identity and human approvals.
- Establish runtime policy enforcement and security controls for AI-driven workflows.

3. Identity, Tenancy and Secrets

- Define architecture for authentication, authorisation, tenant and workspace isolation, workload identity, BYOK, secrets management and least-privilege access.
- Ensure secure access across users, agents and services.

4. Knowledge and Data Security

- Protect sensitive data, EKG/RAG sources, embeddings, citations, logs and traces.
- Ensure access controls, masking, encryption, provenance and data-retention policies are enforced end to end.

5. Secure AIDLC

- Translate security principles into practical design standards, threat models, secure coding expectations, DevSecOps controls and release evidence.
- Embed security into the development lifecycle without creating unnecessary approval bottlenecks.

6. Risk Decisions and Customer Assurance

- Own security exceptions and material risk recommendations.




- Support strategic customer and CISO reviews.
- Partner with the corporate CISO on certifications, VAPT and enterprise security controls.

What you bring
- Product Security Architecture: Experience owning security architecture for a live enterprise software product or platform, with the ability to explain the decisions, threats, trade-offs and production outcomes you've personally owned.
- Threat Modelling and Risk Judgement: Ability to identify trust boundaries and realistic attack paths, prioritise controls by risk, and make informed risk decisions.
- Cloud, Identity and Application Security: Strong knowledge of IAM, OAuth/OIDC, API security, Kubernetes/cloud security, network segmentation, secrets management, encryption and secure multi-tenancy.
- Applied AI Security: Practical understanding of LLM and agentic AI risks, including RAG, memory, tool/MCP access, model providers, guardrails and high-risk agent actions.
- Hands-on Technical Depth: Comfortable reviewing architecture, code, APIs and configurations, tracing data flows and troubleshooting security weaknesses alongside engineering teams.
- Influence and Communication: Ability to constructively challenge senior architects, Product, Engineering and customers, translating security concerns into clear engineering decisions and alternatives.

Good to have
- Experience working with regulated enterprises and familiarity with SOC 2, ISO 27001, ISO 42001, customer security reviews or external assurance.
- Multi-cloud and on-premises security architecture experience across AWS, Azure, GCP, OpenShift or Kubernetes.
- Experience securing agentic AI, MCP/tool ecosystems, vector and knowledge platforms or multi-tenant SaaS products.
- Certifications such as CISSP, CCSP, SABSA or equivalent. Demonstrated architecture ownership matters more than certifications.

Interested?If you're passionate about building secure, enterprise-grade AI platforms and shaping the future of AI security, we'd love to hear from you.

📌 Head of Architecture (Chennai)
🏢 Intellect Design Arena
📍 Chennai