Principal AI Security Architect

About the role:We are seeking a highly accomplished Principal AI Security Architect to lead the design and implementation of enterprise-wide security strategies. This role will be instrumental in securing our enterprise applications, AI-driven platforms (including AI Agents), and cloud environments against evolving cyber threats. The Principal Security Architect will partner with technology leaders, engineering teams, and business stakeholders to define security architecture standards, guide the adoption of emerging technologies, and provide solutions for the most complex security challenges.Key Responsibilities:Security Architecture & StrategyDefine and own the enterprise security architecture for applications, AI/ML, AI Agents, data, and infrastructure.Establish security reference architectures, patterns, and frameworks to drive consistent adoption across the organization.Develop zero-trust security models, secure-by-design principles, and identity-centric security frameworks.Anticipate and design solutions for emerging threats in AI, cloud-native, and hybrid environments.Enterprise Applications SecurityArchitect secure application development practices, including secure coding standards, API security, and microservices security.Guide teams on secure integration patterns for SaaS, PaaS, and enterprise platforms.Advanced AI & AI Agents SecurityDevelop strategies to secure AI/ML pipelines (data ingestion, training, inference).Secure AI Agents by implementing:Access control and identity verification for autonomous agents.Protection against prompt injection, model manipulation, and impersonation attacks.Guardrails for data access, least-privilege permissions, and secure API call orchestration.Auditability and logging frameworks to track AI Agent decisions and actions.Apply confidential computing, secure enclaves, and federated learning to protect models and datasets.Establish responsible AI and AI Agent governance aligned with frameworks like NIST AI RMF, EU AI Act, ISO/IEC AI standards.Cloud, Networking & Infrastructure SecurityLead cloud security architecture across Azure, GCP, and hybrid environments.Architect secure solutions for Kubernetes, serverless, and containerized workloads.Apply IaC security controls and leverage cloud-native tools (CSPM, CWPP, CIEM).Architect network security solutions, including:Firewalls, IDS/IPS, WAF, VPNs, and next-gen networking tools.Secure segmentation and micro-segmentation for hybrid and multi-cloud environments.Network observability and anomaly detection for intrusion prevention.Implement data encryption, key management, and certificate-based trust models at enterprise scale.Security Tools & OperationsEvaluate, integrate, and optimize best-of-breed security toolsMentor teams to adopt DevSecOps practices and shift security left in development pipelines.