Principal Architect - Cybersecurity

Overview

Lead cybersecurity architecture for automotive cloud services and customer-facing web portals supporting connected vehicle ecosystems, acting as a senior individual contributor who drives secure-by-design outcomes across teams.

What you'll do

• Own end-to-end cybersecurity architecture for automotive cloud platforms, backend services, web portals, APIs, identity flows, data pipelines, and vehicle-to-cloud interfaces.
• Lead TARA activities and translate identified threats and risks into cybersecurity goals, requirements, controls, and traceable architecture decisions.
• Define reusable security patterns for identity and access management, authentication, authorization, privileged access, secrets management, PKI, encryption, certificate lifecycle management, and secure communications.
• Review cloud and application architectures for trust boundaries, network segmentation, API security, logging, monitoring, vulnerability management, data protection, resilience, and secure deployment.
• Guide threat modeling, cybersecurity concept development, architecture reviews, design assurance, and risk-acceptance discussions throughout the development lifecycle.
• Align relevant cybersecurity work products and assurance evidence with ISO/SAE 21434, and support activities related to CSMS, SUMS, UNECE R155, UNECE R156, audits, and Vehicle Type Approval.
• Partner with engineering and DevSecOps teams to embed security into CI/CD pipelines, infrastructure as code, software supply-chain controls, dependency management, and release governance.
• Define and review security testing strategies covering SAST, DAST, software composition analysis, API security testing, cloud-configuration reviews, and penetration testing.
• Provide technical leadership during vulnerability triage and cybersecurity incident response, ensuring that affected product and service teams engage the appropriate cybersecurity stakeholders.
• Communicate technical risks, architecture trade-offs, and remediation priorities clearly to engineering leaders, product owners, auditors, and customer-facing teams.
• Mentor architects and engineers on automotive cybersecurity, cloud security, secure design practices, and reusable architecture patterns.

What you'll need

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, Electronics, or a related technical field, or equivalent practical experience.
• 7+ years of experience in cybersecurity, software architecture, cloud security, or a related engineering discipline, including experience leading security architecture decisions for complex systems.
• Hands-on understanding of cloud security principles and services across at least one major cloud platform, such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
• Demonstrable experience with web, backend, and API security, including IAM, OAuth 2.0, OpenID Connect, TLS/SSL, PKI, encryption, authorization models, secure session management, and common web security risks.
• Experience performing threat modeling and TARA, defining cybersecurity requirements, and maintaining traceability from identified risks and risk treatment decisions to architecture, implementation, and verification evidence.
• Working knowledge of ISO/SAE 21434 and its work products, with the ability to support cybersecurity concept, architecture, engineering, and assurance activities.
• Understanding of secure software development, DevSecOps, CI/CD security, software supply-chain risk, vulnerability management, and security testing practices.
• Ability to evaluate architectures across trust boundaries, data flows, identity flows, network zones, cloud services, vehicle interfaces, and third-party integrations.
• Strong analytical, documentation, stakeholder-management, and technical communication skills in English.
• Ability to provide technical leadership through influence in globally distributed, cross-functional engineering environments.

Nice to have

• Master's degree in Cybersecurity, Computer Science, Software Engineering, or a related field.
• Relevant certification such as CISSP, CCSP, CSSLP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or an equivalent cloud or security credential.
• Experience with automotive connected services, telematics, OTA, digital key, fleet platforms, vehicle data services, or customer-facing web portals.
• Practical knowledge of UNECE R155, UNECE R156, CSMS, SUMS, Vehicle Type Approval, and cybersecurity audit or assessment support.
• Experience supporting ISO/IEC 27001 controls, risk management, or information-security management activities in cloud and backend environments.
• Familiarity with Android Automotive, Linux, SELinux, TEE, Trusted Applications, secure boot, OpenSSL, JSSE, or embedded and vehicle cybersecurity architecture.
• Experience with containers, Kubernetes, service meshes, cloud-native security controls, infrastructure as code, or policy as code.
• Knowledge of OWASP ASVS, the OWASP API Security Top 10, NIST guidance, or comparable secure architecture and application-security practices.

Details

• Location: Bangalore - Karnataka, India - Kalyani Platina.
• Eligible to work in India; specific work-authorization requirements to be confirmed by Human Resources.
• Exact work location, hybrid or on-site expectations, and travel requirements to be confirmed.
• Willing to work with reasonable schedule flexibility when collaboration across time zones is required.