Principal Architect Engineering Bengaluru, India (Hybrid/On-site) or Remote within India · 15+ years

Mirror Mirror AI, Inc.; India; Hybrid; INR 6,000,000 - 9,000,000; Full time

Job summary

MirrorMire is seeking a Senior Security Architect to own the architecture and drive implementation for AMaze components. You will design and evolve network and data-layer architectures, including PostgreSQL and encryption, while shaping observability and disaster-recovery across hybrid SaaS and air-gapped deployments.

You will lead identity architecture (Azure AD/Entra ID), RBAC, and integration with enterprise systems.

Qualifications

• 15+ years in security engineering/architecture roles.
• Deep experience with cybersecurity architecture and deception tech, IAM, network security, or ICS/OT security.
• Hands-on experience building observability stacks (OpenTelemetry, Prometheus, Grafana, log systems).
• Strong grounding in identity providers (Azure AD/Entra ID) and enterprise authentication patterns.
• Experience with hybrid SaaS + air-gapped/on-prem deployments for regulated industries.

Responsibilities

• Own architecture and contribute to implementation for AMaze components (Neural Echo, GateKeeper, honeytokens).
• Design and evolve subnet/network architecture, data layer (PostgreSQL, AES-256, immutable audit logging) and DR strategy.
• Architect observability and serviceability with OpenTelemetry, Prometheus, Grafana across hybrid deployments.
• Design identity/access architecture including Azure AD/Entra ID and RBAC.
• Write implementation-ready specs and validate them in code where needed.
• Architect integrations with enterprise systems (e.g., Graph API/OAuth2) and make independent technical decisions.

Skills

Security architecture

Observability stacks

Azure AD / Entra ID

Hybrid deployment

RFCs / technical writing

Deception technology

ICS/OT security

Tools

PostgreSQL

AES-256 encryption-at-rest

WORM audit logging

OpenTelemetry

Prometheus

Grafana

Loki

OpenSearch

Job description

Engineering Bengaluru, India (Hybrid/On-site) or Remote within India · 15+ years

MirrorMire is an AI-native cybersecurity company advancing proactive cyber resilience against sophisticated cyber threats. Our flagship platform, AMaze™, combines Synthetic Cognitive Agents, Neural Echoes, and advanced behavioral analytics to uncover malicious activity early, steer adversaries into controlled environments, and stop attacks before they can compromise critical systems and data.

What You'll Do

• Own architecture and contribute directly to implementation for core AMaze™ components — Neural Echo Synthetic Cyber Agents, GateKeeper (ICS/OT deception), HoneyPaths/honeytokens, and the MMM cognitive loop (Mirror, Maneuver, Maze).
• Design and evolve the platform's subnet/network architecture, data layer (PostgreSQL, AES-256 encryption-at-rest, immutable WORM audit logging), and backup/disaster-recovery strategy.
• Architect observability and serviceability — OpenTelemetry instrumentation, metrics (Prometheus/VictoriaMetrics), logging (Loki/OpenSearch), and dashboards (Grafana) — across hybrid SaaS and air-gapped deployment models.
• Design identity and access architecture, including Azure AD/Entra ID integration and RBAC.
• Write formal, implementation-ready engineering specs, and stay hands-on enough to validate them yourself in code where needed.
• Architect integrations with enterprise systems, such as Microsoft Graph API/OAuth2 for alerting workflows.
• Make independent technical calls on scalability, security posture, and platform tradeoffs, in direct partnership with the CXO — no layer of management in between.
• Do deep, focused technical work without team-lead or people-management responsibilities.

Requirements

• 15+ years in security engineering/architecture roles, with a track record of staying hands-on as you've gone deeper technically (not moved into management).
• Deep experience with cybersecurity architecture — deception technology, IAM, network security, or ICS/OT security is a strong plus.
• Hands-on experience designing and building observability stacks (OpenTelemetry, Prometheus, Grafana, log aggregation systems).
• Strong grounding in identity providers (Azure AD/Entra ID) and enterprise auth patterns.
• Experience with hybrid deployment models (SaaS + air-gapped/on-prem) — common in security products sold to regulated industries (BFSI, critical infrastructure).
• Comfortable writing precise, implementation-ready specs and then getting into the code to see them through.
• Startup mindset: thrives on ambiguity, minimal process, and direct ownership — no team to delegate to.
• Prior experience at enterprise security/communications vendors (e.g., Cisco-, HPE-style environments) is a plus.

Preferred Experience

• Experience with cyber deception or honeypot technologies specifically
• Familiarity with BFSI or critical infrastructure compliance requirements
• Exposure to AI/ML-driven security tooling

What We'd Love to See

• Architecture docs, RFCs, or technical writing you can share