IAM Architect (AI Security & Identity)

About the Role

We are looking for a Solution Architect with 10–15 years of experience to design scalable, secure, and cloud-ready solutions. The role involves working with customers, Senior Solution Architects, business analysts, project managers, and engineering teams across cloud, modernization, microservices, integration, and digital transformation initiatives.

Must Have Skills

• 10–15 years of experience in software development, architecture, and enterprise application delivery.
• Strong experience with Azure and/or AWS and cloud-native architecture.
• Hands-on experience with Microservices, REST APIs, SOA, and system integration.
• Experience in application modernization and cloud migration.
• Knowledge of Docker, Kubernetes, CI/CD, and Infrastructure as Code.
• Understanding of cloud security, IAM, networking, monitoring, and disaster recovery.
• Ability to create architecture diagrams, solution designs, and technical documentation.
• Strong analytical, communication, and customer-facing skills.

Good To Have Skills

• AWS/Azure certifications.
• Experience with Serverless, Event-Driven Architecture, Messaging, and API Management.
• Exposure to SaaS / Multi-Tenant Architecture.
• Knowledge of Generative AI and AI-enabled solutions.
• Experience with pre-sales, POCs, estimations, and technical proposals.
• Exposure to application security and compliance.
• Experience working with global customers and distributed teams.

Responsibilities

• Design end-to-end solutions and independently own defined architecture workstreams.
• Translate business and technical requirements into application, cloud, integration, and deployment designs.
• Define microservice, API, integration, and data-flow architectures.
• Guide engineering teams on architecture implementation and conduct design/code reviews.
• Contribute to cloud migration, modernization, and digital transformation initiatives.
• Participate in customer workshops, technical discussions, POCs, and solution demonstrations.
• Identify and address architectural, performance, security, and technical risks.
• Ensure solutions follow defined architecture, security, and engineering standards.
• Work closely with the Senior Solution Architect on complex and strategic engagements.
• Develop reusable architecture patterns, templates, and technical accelerators

Next

Job Description: 

Lead regional transformation programs, driving the entire solution architecture lifecycle, 

from conceptualization to execution, with a focus on agile and DevOps practices. 

Accountable for leading the IT Architecture for all projects and programs, focusing on 

innovative business and IT solutions in the insurance domain, such as new-age digital 

platforms, cloud-native applications, AI/ML-powered decision-making, and data-driven 

insights.

Preferred skills  

• Demonstrated expertise in developing cloud-native, microservices-based, and API

driven insurance solutions, leveraging modern architectural patterns and emerging 

technologies such as AI/ML, big data, and IoT. 

• Thorough understanding of common patterns, frameworks, and reference 

architectures for the Insurance domain, with a focus on digital transformation and 

innovation. 

• Proven experience in leading regional transformation programs, driving the adoption 

of agile and DevOps practices. 

• Asia regional experience is an advantage.

Qualifications 

Minimum Bachelor's degree, preferably with a Master's degree in Computer Science, 

Engineering, or a related discipline. 

• 15+ years of IT experience, with a minimum of 7+ years in the insurance industry, 

focusing on the application of emerging technologies.

Key Responsibilities

·       System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.

·       Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.

·       Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.

·       Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.

·       Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.

Required Qualifications

·       Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.

·       Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.

·       Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.

·       Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.

·       Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).

Preferred Skills

·        Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.

·        Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.

Position Summary

We are looking for an experienced Enterprise Architect to define and deliver enterprise-scale digital experience architectures leveraging AI/ML capabilities, data platforms, and modern cloud technologies. The role involves partnering with senior business and technology stakeholders to translate business objectives into scalable architectures, strategic roadmaps, and technology solutions.

The ideal candidate will have strong expertise in enterprise architecture, cloud-native technologies, AI-driven customer experiences, and digital marketing platforms, along with the ability to lead architecture initiatives across cross-functional teams.

Key Responsibilities

• Enterprise Strategy & Roadmaps: Define digital, data, and AI strategies, translating business vision into actionable architecture roadmaps aligned with business goals and KPIs.
• Architecture Design: Design end-to-end enterprise and solution architectures integrating digital experience platforms, customer data platforms, AI/ML capabilities, and cloud services.
• Cloud & Technology Architecture: Recommend scalable, secure, and resilient architectures using cloud-native, API-first, microservices, event-driven, and serverless principles across Azure, AWS, or other public cloud platforms.
• AI & Data Architecture: Define architectures for customer data platforms, identity and profile management, data ingestion, governance, personalization, journey orchestration, and AI-powered experiences.
• Architecture Governance: Establish architecture standards, reference architectures, governance frameworks, and operating models to ensure consistency, security, and sustainable technology adoption.
• Stakeholder Management: Collaborate with business leaders, engineering teams, data architects, developers, and data scientists to drive architecture alignment and execution.
• Executive Communication: Lead architecture workshops, visioning sessions, and roadmap presentations, communicating technical recommendations and trade-offs to senior leadership.
• Practice Development: Contribute to reusable architecture assets, mentor architects and consultants, and support presales activities, solutioning, estimations, and proposals.

Required Skills & Experience

• Proven experience in enterprise architecture, solution architecture, and developing enterprise architecture models and roadmaps.
• Strong understanding of architecture frameworks and principles, including TOGAF, SOA, and API-led architecture.
• Hands-on experience with public cloud architecture and services, particularly Microsoft Azure and/or AWS.
• Experience designing and integrating AI-powered solutions, with knowledge of LLMs, prompt engineering, RAG, and model evaluation.
• Understanding of agentic workflows, tool-using agents, and enterprise AI governance, observability, and reliability.
• Experience working with software engineers, application developers, data architects, and data science/ML teams to deliver end-to-end solutions.
• Ability to translate business requirements and strategic vision into technical architectures and implementation roadmaps.
• Strong stakeholder management, leadership, presentation, and communication skills, including experience engaging with senior executives.
• Ability to lead architecture execution across multidisciplinary teams and communicate complex technical concepts to diverse audiences.

Good to Have

• Experience with Adobe Experience Cloud, Adobe Experience Platform, or one or more digital experience solutions.
• Previous experience with other digital marketing and customer experience platforms.
• Experience with customer data platforms, personalization, omnichannel engagement, and marketing optimization initiatives.
• Experience supporting consulting engagements, presales, and enterprise transformation initiatives.

Additional Requirement

- Willingness to travel up to 50%, depending on business and client requirements.

Position

Solution Architect/Technical Architect

Experience

·       12 - 16+ years of overall IT experience

·       Significant hands-on experience working as a Solution/Technical Architect

Education

·       B.Tech / M.Tech / MCA / MBA or equivalent

Certifications

·       TOGAF® certification (Level 1/2) preferred to ensure alignment with enterprise architecture standards

·       Microsoft Certified: Azure Solutions Architect Expert (AZ-305) and other supporting certifications such as AZ-104, AZ-400, or AZ-500 preferred.

Key Responsibilities

·       Define and evolve the target architecture for .NET-based distributed platform.

·       Architect highly configurable solutions on Azure with strong focus on scalability, tenant isolation, resilience, maintainability, and speed of delivery.

·       Lead solution design across ASP.NET Core services, REST APIs, event-driven workflows, background processing, integration patterns, and shared platform capabilities.

·       Drive adoption of modern .NET and cloud-native patterns including microservices, domain-driven design, event-driven architecture, API-first design, and secure service-to-service communication.

·       Partner with engineering teams on real implementation decisions, review critical designs and code paths, and provide hands-on guidance for performance, operability, and production readiness.

·       Architect Azure-native deployment patterns using AKS, containers, API Management, Service Bus/Event Grid or equivalent messaging, Key Vault, managed observability, and CI/CD automation.

·       Work with data and platform teams on PostgreSQL-backed service design, data access patterns, caching strategies, and database performance for high-volume transactional workloads.

·       Define non-functional requirements and architecture guardrails around performance, scalability, availability, recoverability, security, compliance, and cost efficiency.

·       Embed DevSecOps and observability into platform design through telemetry, tracing, alerting, diagnostics, secrets management, and release governance.

·       Evaluate emerging technologies, AI-assisted engineering enablers, and modernization options pragmatically, with clear build-vs-buy and risk-reward trade-offs.

·       Mentor senior engineers and technical leads, contribute to architectural governance, and create reusable patterns, reference implementations, and standards across teams.

·       Bachelor’s or master’s degree in computer science, Engineering, or a related field.

·       12–16 years of experience in software engineering, solution architecture, or platform engineering, with significant experience in Microsoft technology stacks.

Essential Qualification and Skills

·       Strong hands-on expertise in C#, .NET / .NET Core / .NET 8, ASP.NET Core, Web APIs, background services, and enterprise application design.

·       Deep experience in architecting distributed systems using microservices, asynchronous messaging, event-driven design, and API-led integration patterns.

·       Strong Azure architecture experience, preferably across AKS, App Services, Functions, API Management, Key Vault, Service Bus, Event Grid, Storage, monitoring, and identity integration patterns.

·       Experience designing and supporting platforms, configurable product architectures, and integration-heavy enterprise solutions.

·       Strong understanding of relational databases and performance engineering, especially SQL Server and/or PostgreSQL, including schema design, indexing, query tuning, and transaction handling.

·       Solid grasp of non-functional architecture including performance, scalability, availability, fault isolation, observability, and disaster recovery.

·       Strong understanding of application and platform security including authentication, authorization, secrets management, encryption, secure coding, and compliance-oriented design.

·       Experience with containers, Kubernetes, CI/CD, infrastructure automation, and modern DevSecOps practices.

·       Ability to make sound architecture decisions with a balance of pragmatism, delivery speed, engineering quality, and long-term maintainability.

·       Strong communication and stakeholder management skills across product, engineering, architecture, operations, security, and client-facing teams.

Skills & Competencies

·       Experience in insurance, Insurtech, BFSI, or other regulated, transaction-heavy domains.

·       Exposure to policy administration, billing, accounting, claims, workflow orchestration, or reporting platforms within the insurance value chain.

·       Experience with architecture frameworks and modelling approaches such as TOGAF, domain-driven design, UML, C4, or equivalent practical architecture methods.

·       Familiarity with mixed technology landscapes involving .NET, Java/Spring Boot, enterprise workflow tools, and integration ecosystems.

·       Experience with observability and reliability tooling such as Datadog, Dynatrace, Application Insights, Open Telemetry, Grafana, or similar.

·       Working knowledge of Angular, React, or modern web application architecture patterns.

·       Exposure to AI-enabled engineering, intelligent automation, or embedding AI capabilities into enterprise platforms.

·       Leadership experience across globally distributed or virtual teams.

DevOps & Cloud Security Specialist to architect enterprise-grade AWS networking, implement strict IAM security boundaries (HIPAA/GDPR compliance), automate infrastructure via IaC, and maintain crystal-clear technical documentation.

1. Primary Must-Have Competencies (Core Priorities)

A. AWS Networking & VPC Topology (Top Priority)

• Advanced VPC Architecture: Mastery in designing multi-VPC topologies, isolated subnets, custom Route Tables, NAT Gateways, Transit Gateways, and Cross-Region VPC Peering.
• Private Network Security: Extensive experience using VPC Endpoints (Gateway & Interface/PrivateLink) to keep internal AWS traffic completely off the public internet.
• Traffic Ingestion & Edge Security: Expertise in AWS WAF (custom rules, bot control, rate limiting), API Gateway throttling, ALB configuration, and Route 53 global routing.

B. AWS Security, IAM Architecture & Compliance

• Enterprise IAM Governance: Expertise in AWS Organizations, IAM Identity Center (SSO), Permission Boundaries, Service Control Policies (SCPs), and temporary role assumption across multi-account setups.
• Data Protection & Key Management: Deep knowledge of AWS KMS (customer-managed keys, envelope encryption at rest and in transit) and AWS Secrets Manager.
• Audit & Compliance: Setting up centralized logging pipelines (CloudTrail, GuardDuty, AWS Config, CloudWatch Audit Logs) for strict HIPAA/GDPR compliance.

C. Infrastructure as Code (IaC) & Containerization

• Terraform / AWS CDK: Must write production-grade, modular IaC templates from scratch—enforcing network topology and security guardrails directly in code.
• Container Orchestration: Hands-on setup and management of AWS ECS (Fargate) or EKS (Kubernetes) and automated CI/CD pipelines (GitHub Actions, GitLab CI).

D. Architecture Documentation & Systems Mapping

• Technical Documentation: Ability to author clean, standardized architecture diagrams (e.g., C4 model, Draw.io, Lucidchart) and maintain comprehensive runbooks, incident response plans, and compliance documentation.

2. Secondary Competency (Strong Advantage, Not Mandatory)

• Backend Software Development: Hands-on experience or a background in writing/debugging backend code in Node.js, Python, or Go.
• Note: The primary responsibility is cloud infrastructure, security, and automation. However, the ability to read backend code, debug API bottlenecks, or assist developers with microservice integrations is a major bonus.

Skill: Java Architect

Location: Pune Baner Office

Note: Client F2F is mandate

Budget:33 LPA

Experience: 10+ Years

Mandate Skills- Cloud+ Java Architect

Who are we looking for?

We are looking for a Technical Architect, having strong software design and development experience of 9+ years on Core Java, Spring Boot, REST API, AWS & Microservices.

Technical Skills: 

Proficient in software Design and development and familiar with technologies - Java, Java-J2EE, Spring Boot, Hibernate, Ajax, REST API, Microservices etc.

Working knowledge of JVM internals

Working knowledge in Mongo DB

Working knowledge of any database (MySQL or HSQLDB)

Working knowledge of No-SQL database (Mongo or Dynamo DB)

Working experience with messaging (JMS/RabbitMQ) 

R & D on new advanced cloud-based technologies in a test-driven agile development.

Experience in designing and architecting systems with high scalability and performance requirements

Ability to design infrastructure for performance evaluation and reporting of cloud-based services, namely AWS

In depth knowledge of key AWS services like EC2, S3, Lambda, CloudWatch etc.

Certification on AWS architecture desirable

Roles and Responsibilities: 

Participate and contribute in platform requirements/story development.

Contribute to the solutioning, design and design alternatives to the requirements/stories and also participate in design reviews.

Involve in Platform Sprint activities.

Development of assigned stories in appropriate languages defined for each module.

Participate in peer code reviews 

Develop use cases and do unit test cases and execute them part of continuous integration pipeline.

Understand stack deployment and resolve issues with components in stacks across the ecommerce platform.

Process Skills: 

Agile – Scrum and Test-Driven Development

Qualification:

Bachelor of Engineering (Computer background preferred)

AI Architect – Enterprise AI & Generative AI ( Remote) - Contractual

Experience: 8+ years

Location: Remote, India

Employment Type: Contractual

Working Hours: 3:00 PM – 12:00 AM IST

Client Engagement: US-based client

About the Role

We are looking for a hands-on, client-facing AI Architect to lead the architecture, technical direction, and production implementation of enterprise AI and Generative AI solutions for a US-based client.

You should combine strong software engineering and cloud architecture fundamentals with practical experience building secure, scalable, and reliable AI applications. This role involves end-to-end technical ownership, from solution design and prototyping to production deployment and optimization. It is not a research-only, advisory-only, or prompt-writing position.

Key Responsibilities

• Lead end-to-end architecture and delivery of AI/ML and Generative AI solutions, from discovery and proof of concept to production rollout.
• Design LLM-powered applications using Retrieval-Augmented Generation (RAG), embeddings, vector databases, AI agents, and orchestration frameworks.
• Define data ingestion, chunking, retrieval, grounding, evaluation, and knowledge-refresh strategies.
• Select appropriate AI models and platforms based on quality, latency, cost, security, and operational requirements.
• Design cloud-native architectures, APIs, integrations, identity controls, monitoring, and resilient deployment patterns.
• Create architecture diagrams, technical designs, implementation roadmaps, and technical standards.
• Implement AI quality and safety measures, including hallucination mitigation, guardrails, access controls, and prompt-injection defenses.
• Guide engineering, data, ML, and DevOps teams through implementation, code reviews, troubleshooting, and go-live readiness.
• Lead technical discussions and design reviews with US client stakeholders.
• Establish production monitoring, CI/CD, versioning, incident handling, and performance and cost optimization practices.

Required Skills & Qualifications

• 8+ years of relevant experience in software engineering, AI/ML engineering, data engineering, or technology architecture.
• Proven experience personally architecting and deploying at least one enterprise-grade AI or Generative AI solution into production.
• Strong practical knowledge of LLMs, RAG, embeddings, vector databases, orchestration frameworks, and model evaluation.
• Hands-on experience with Python and APIs, including prototyping, code review, and troubleshooting.
• Experience with at least one major cloud platform: Microsoft Azure, AWS, or Google Cloud Platform (GCP).
• Understanding of data pipelines, SQL/NoSQL databases, containers, CI/CD, MLOps, and LLMOps.
• Knowledge of enterprise security, privacy, identity and access management, and responsible AI practices.
• Experience independently leading architecture workshops, design reviews, and technical discussions with US clients.
• Excellent written and spoken English, documentation, and stakeholder management skills.
• Availability to work from 3:00 PM to 12:00 AM IST and willingness to accept a contractual engagement.

Preferred Experience

• Azure AI Foundry, Azure OpenAI, Amazon Bedrock, or Google Vertex AI.
• Azure AI Search or equivalent retrieval tools.
• LangChain, LangGraph, Semantic Kernel, and agent/tool orchestration.
• Model fine-tuning, predictive ML, document intelligence, multimodal AI, or real-time AI applications.
• Experience in cloud modernization, enterprise integrations, data analytics, or technology consulting.
• Relevant AI/cloud architecture certifications and experience mentoring technical teams.

What Success Looks Like

• Designing secure, scalable, production-ready AI solutions rather than demos or conceptual presentations.
• Making sound technical decisions around feasibility, performance, reliability, cost, and AI risks.
• Taking ownership of architecture decisions and resolving technical blockers with limited supervision.
• Building trust with senior US stakeholders and collaborating effectively with India-based delivery teams.

Contract Details

• Initial engagement: Minimum 3 months, with extension subject to project requirements and performance.
• Working schedule: 3:00 PM – 12:00 AM IST.
• Potential permanent employment: After 18 months, the client may consider direct permanent employment at its sole discretion. Conversion is not guaranteed.

Mandatory Screening Criteria

Candidates should be able to:

• Explain an enterprise AI/GenAI solution they personally architected and deployed, including architecture, scale, evaluation, and business impact.
• Whiteboard an enterprise RAG or agentic solution covering data flow, security, authentication, authorization, monitoring, and cost controls.
• Discuss real-world model-quality issues, hallucinations, privacy risks, incidents, and architectural trade-offs.
• Lead a technical design review with US client stakeholders.
• Confirm acceptance of the working hours and contractual engagement.

Apply only if you have hands-on experience architecting and deploying enterprise AI/GenAI solutions in production.

Read This Before Anything Else

We have 6 developers who can ship. What we don't have is someone who turns that into a real engineering function: real architecture, real leverage, real AI-driven advantage. If that gap sounds like an opportunity rather than a headache, you're in the right place. If it sounds like a lot of undefined work with no playbook handed to you, this one probably isn't for you. That's completely okay. There are plenty of great roles that fit differently.

About CraftMyPlate

CraftMyPlate is Hyderabad's go-to platform for food experiences for micro-events: house parties, birthdays, office celebrations, festive gatherings, and more. We're building the operating system for how India discovers, customises, and orders food for smaller events. We're backed by established founders and investors, and we're funded and growing fast. The next phase of that growth runs through engineering.

Where We Stand

Some numbers, because they matter more than adjectives. Order volume has grown 50x in two years, and we're compounding at roughly 3x year over year, without giving up equity to fund it. That means the business runs on its own economics. The growth is real demand, not runway bought with dilution, and every efficient architectural decision this role makes directly protects that.

Most people size up an opportunity by asking what's going to change in ten years. The more useful question, and the one this company is built around, is what won't change. People will keep gathering. They'll keep celebrating, hosting, and marking festivals, in 10 years and in 20. That permanence is the bet. You're not building infrastructure for a trend cycle. You're building for a category that outlasts the current AI wave, the next funding round, and probably us too.

The Technical Reality

Here's an honest read of the engineering problem, not a sanitized version of it.

Event-driven commerce doesn't scale like typical e-commerce. Demand isn't smooth, it's spiky: weekends, festival calendars, and event dates create real load concentration, and each order is tied to a hard deadline that can't slip the way a shipped package can. That has direct architectural consequences: systems need to handle bursty, unpredictable traffic without paying for idle capacity the rest of the time, which is exactly why we're serverless-first on AWS rather than running a fixed fleet sized for peak.

Underneath that, every order touches multiple systems that have to stay consistent: kitchen and vendor fulfillment status, inventory across partners, payment gateway settlement, and refunds, often in real time and often across more than one vendor for a single event. Getting that consistency right across SQL and NoSQL stores, without it becoming a source of support tickets and manual reconciliation, is a real architecture problem, not a CRUD problem.

The AI-agent layer is the next lever, and it's a business lever as much as a technical one. Every workflow we can hand to a well-orchestrated agent instead of a new hire is a workflow that scales without adding headcount, which is exactly how a company grows 3x a year without diluting equity to fund the team behind it. That's why agent orchestration across multiple LLMs, using LangGraph, sits in the "go deep" tier of this role rather than being a nice-to-have.

You'll likely find some of this framing right and some of it worth challenging once you're actually in the codebase. That's expected, and honestly preferred over someone who just nods along.

Why This Role Exists

You'll be the most senior technical person in the company, reporting directly to the founder. Not a manager brought in to run standups. An owner. You set the architecture, you write code yourself, and you make the team materially better. You also own where AI and automation take this company next, starting with our first in-house AI agent product (details shared in the interview), and expanding from there into how the company runs, department by department: HR, finance, marketing, design, development, all sitting on an engineering layer that you design.

If you've outgrown a role where you plan but don't build, or where good ideas die in a committee, this is built to be the opposite of that.

What You'll Own

• Architecture, end to end. Scalable, cost-efficient systems from day one, not "fix it later" engineering. You own the decisions and their long-term consequences.
• Hands-on building. You are still writing code and shipping. This isn't a seat where you review other people's work all day. You lead by building.
• The engineering team. Directly manage, mentor, and level up our 6 developers. Build the technical bar, the review culture, and the calibration that lets the team ship independently.
• The AI-agent roadmap. Own the architecture behind our first AI agent product, then the broader strategy for AI agents and automation across every function in the company, with engineering as the layer underneath all of it.
• Team scaling. Build the next layer of leads under you so execution quality scales without you being the bottleneck.
• Technical accountability. When something breaks, you fix it. You don't escalate and wait.

Our Stack, and the Depth We Expect

Not everything on this list needs the same level of mastery. Some of it you need to own at an architectural level. The rest you need to be strong enough to build yourself, direct the team on, or delegate to AI agents with confidence.

Go deep here. This is where the real architecture decisions live, and where the business impact is highest:

• AWS, serverless first. You should be genuinely well versed in AWS application development, not just "have used AWS." You should be able to design and guide serverless architecture (Lambda, API Gateway, DynamoDB, Step Functions, and similar) as our default way of building, because our demand curve is spiky by nature and fixed infrastructure is money left on the table.
• TypeScript, our primary language across backend and frontend.
• Agent orchestration across multiple LLMs, using LangGraph. This is core to our AI roadmap and our path to scaling operations without scaling headcount. You own how it's architected, not just how it's used.

Working proficiency. Build it yourself, direct the team, or hand it to an AI agent and know if the output is right.

This Is You If

• You've built and shipped real production systems yourself, not just reviewed other people's architecture from a distance.
• You go deep wherever the problem is, and you're comfortable owning the exact stack described above, not just "full-stack" in the abstract.
• You've made engineers around you measurably better, whether or not you've held the title for it yet.
• You're already using AI coding tools and agents seriously, like Claude, Cursor, or similar tools, as part of how you build, not as something you tried once. We'll likely explore this together in the interview.
• You have a bias toward leverage over hours. You'd rather automate or systematize a problem than grind through it. But when something's live and needs to be done right, you see it through completely, with no half-finished work.
• You want to build something for years, not land somewhere comfortable. We'll know the difference from how you talk about your last three years.

This Might Not Be the Right Fit If

• You'd prefer a stable, well-defined role with clear boundaries and someone else making the calls. That's a fair thing to want, just not what this is.
• You'd rather receive direction than bring us architecture and AI strategy yourself.
• You haven't yet gotten hands-on with AI coding tools in your daily work.
• You're drawn more to the title than the work behind it.

If none of that sounds like you, we'd love to hear from you.

Requirements

• 5 to 7 years of experience in software engineering, with real ownership of architecture-level decisions, not just feature delivery.
• Prior experience leading or mentoring engineers, formally or informally.
• Tier-1 or Tier-1+ engineering college strongly preferred (IIT, BITS, top NIT tier, or equivalent). We'll consider other institutions only with clearly commendable, verifiable work: real systems you can walk us through in depth, strong open-source contributions, or a track record that speaks for itself. Pedigree is a proxy for speed, not a checkbox. We test for the underlying ability regardless.
• Comfortable in an early-stage environment: undefined problems, few processes, and the expectation that you help define both.

Compensation

Competitive, with equity. We're formalizing a structured ESOP program alongside this hire. Specific numbers are discussed directly in later interview rounds.

If reading this got you a little excited about what you'd build here, we'd genuinely love to talk. If it didn't quite land, no hard feelings. We just want the right fit for both sides.

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com