Security Architect

About the role

We are looking for a highly experienced Security Architect to lead the security architecture of our AI and data platform. You will design secure‑by‑design systems across AI workloads, data pipelines and cloud‑native infrastructure, ensuring confidentiality, integrity and availability at scale.

Key responsibilities

• Define and evolve end‑to‑end security architecture for AI systems, data platforms and cloud‑native infrastructure.
• Establish Zero Trust principles, including identity‑first security, mTLS and fine‑grained access control (RBAC/ABAC).
• Design secure patterns for distributed, event‑driven and multi‑tenant architectures.
• Set security standards for Kubernetes platforms, workload isolation, network policies and runtime protection.
• Implement container and software supply‑chain security (image scanning, SBOM, signing, provenance).
• Develop secure deployment models for cloud and air‑gapped environments.
• Define controls for LLM‑based applications, RAG pipelines and protect against data poisoning, model extraction and leakage.
• Embed security into GitOps and CI/CD pipelines using policy‑as‑code and automated enforcement.
• Lead threat modeling, architecture reviews and ensure compliance with ISO 27001 and internal governance.
• Define observability requirements for audit logging and anomaly detection, integrating security signals with OpenTelemetry.

Required profile

• Proven experience designing security architecture for AI, data and cloud‑native platforms.
• Deep understanding of Zero Trust, identity‑centric security and secure multi‑tenant systems.
• Strong background in Kubernetes security and container supply‑chain protection.
• Experience with DevSecOps practices, GitOps, CI/CD and policy‑as‑code.
• Knowledge of AI‑specific threats such as data poisoning and model extraction.
• Familiarity with ISO 27001 and security governance frameworks.

Required skills

• Zero Trust architecture
• mTLS
• RBAC / ABAC
• Kubernetes security
• Container image scanning and SBOM
• GitOps and CI/CD security
• Policy‑as‑code
• ISO 27001 compliance
• OpenTelemetry integration