Cyber Security Architect

About CAI

CAI Software builds digital work execution platforms and software solutions that help manufacturing businesses operate with greater clarity and control. Our people bring structure to complexity by replacing fragmented, paper-based processes with connected digital workflows that improve visibility, compliance, and decision-making in real industrial environments. With 45+ years of experience and a presence across 10+ countries, CAI combines deep industry understanding with practical technology. Our team consists of ~800 employees worldwide who work across 15 core industries and support 5,000+ customers, guided by sound judgment, long-term thinking, and outcomes that endure.

CAI Business Units and the Markets We Serve

CAI Software is organized into three business units - Graphic Communications, Process Manufacturing, and Discrete Manufacturing – aligned to the markets we serve. This structure allows our teams to stay close to customer needs while operating with the scale and support of a global software company.

This role is part of our

Shared Services

team which includes the functions that support CAI business units. This model enables deep industry focus at the BU level while benefiting from the scale, expertise, and stability of unified organization—allowing CAI Software to deliver specialized solutions

CAI India

CAI India is a strategic investment in the company’s future. Our Bangalore Center of Excellence is a place of ownership, expertise, and accountability. Teams in India work on global products end to end, contribute to key decisions, and influence how CAI evolves as a business. This is not a support-led model, but rather a center designed to lead through knowledge, responsibility, and trust.

About the Role

Job Title

Cybersecurity Architect

Job Summary

The Cybersecurity Architect is responsible for designing, implementing, and maintaining secure enterprise and cloud-based architectures that protect the organization’s systems, data, and users. This role partners closely with IT, Cloud, Infrastructure, and Compliance teams to ensure security controls align with business objectives, regulatory requirements, and industry best practices.

Key Responsibilities

• Design and maintain enterprise security architecture across on-prem and cloud environments
• Lead security architecture for endpoint protection, network security, identity, and cloud workloads
• Architect, deploy, and optimize

Endpoint Detection and Response (EDR)

solutions

• Design and manage

next-generation firewall

architectures, including segmentation and policy enforcement

• Architect secure

VPN

solutions for remote and hybrid workforce access

• Design security controls and guardrails for

AWS

and

Azure

cloud environments

• Secure and manage

Microsoft 365 / Office 365

, including identity, email security, and data protection

• Define security standards, reference architectures, and technical security requirements
• Define and implement security controls for

code repositories

(e.g., GitHub, GitLab, Azure DevOps) including access controls, branch protections, secrets management, and secure SDLC guardrails

• Enable automated security testing in pipelines (e.g., SAST, dependency scanning, container/image scanning) and drive remediation with engineering teams
• Support security assessments, audits, and evidence collection for

SOC 2 Type II

and

ISO 27001

compliance

• Collaborate with GRC teams to map technical controls to compliance frameworks
• Evaluate security tools and vendors; provide recommendations and implementation guidance
• Participate in incident response and post-incident architecture improvements
• Stay current with emerging threats, technologies, and security best practices

Required Qualifications

• 7+ years of experience in information security, with 3+ years in a security architecture or senior security engineering role
• Hands-on experience with

EDR platforms

(e.g., CrowdStrike, Defender, SentinelOne, or similar)

• Strong experience designing and managing

next-generation firewalls

(e.g., Palo Alto, Fortinet, Check Point)

• Experience designing and supporting

VPN technologies

• Strong cloud security experience in

AWS

and

Azure

• Experience securing

Microsoft 365 / O365

environments

• Solid understanding of identity and access management (IAM) concepts
• Experience supporting or operating in environments audited under

SOC 2 Type II

and/or

ISO 27001

• Strong knowledge of network, endpoint, cloud, and application security principles
• Ability to translate business and compliance requirements into technical security designs

Key Skills

• Security Architecture & Design
• Endpoint & Network Security
• Cloud Security (AWS, Azure)
• Microsoft 365 Security
• Compliance & Audit Support (SOC 2, ISO 27001)
• Risk Management
• Vendor & Tool Evaluation
• Cross-functional Collaboration

Why Join Us

You’ll have the opportunity to drive some of the most critical transformation initiatives in our company’s history. This is a highly visible role working directly with senior leadership to shape the future operating model of CAI. You’ll bring clarity, discipline, and execution focus to complex cross-functional programs while gaining exposure across every function of the business.

Benefits & Remuneration

• Competitive salary and comprehensive benefits package
• Hybrid work environment
• Generous holiday allowance and additional employee perks
• Strong focus on Individual Career Development (IDP)
• Clear progression plan with opportunities for a long-term career within the business
• Future opportunity to build and lead your own team as the business grows
• Exposure to global teams and customers
• Be part of a leading ERP software vendor serving Manufacturers, Food & Beverage producers, processors, distributors, and the Print Industry
• Join a collaborative, values-led team committed to growing the business and enabling customers to thrive

Equal Employment Opportunity

CAI Software is an Equal Opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, sex (including pregnancy, sexual orientation, and gender identity or expression), religion, disability, genetic information, marital status, veteran status, or any other basis protected by local, state or federal law

Disability Accommodation

CAI Software endeavours to make reasonable accommodations for applicants with disabilities and disabled veterans pursuant to applicable federal and state law. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process or are limited in the ability or unable to access or use the application process and need an alternative method for applying, please contact us at [email protected] or send an e-mail with your specific accommodation request

• 7+ years of experience in information security, with 3+ years in a security architecture or senior security engineering role
• Hands-on experience with EDR platforms (e.g., CrowdStrike, Defender, SentinelOne, or similar)
• Strong experience designing and managing next-generation firewalls (e.g., Palo Alto, Fortinet, Check Point)
• Experience designing and supporting VPN technologies
• Strong cloud security experience in AWS and Azure
• Experience securing Microsoft 365 / O365 environments
• Solid understanding of identity and access management (IAM) concepts
• Experience supporting or operating in environments audited under SOC 2 Type II and/or ISO 27001
• Strong knowledge of network, endpoint, cloud, and application security principles
• Ability to translate business and compliance requirements into technical security designs