Core Architect – Integration Lead, Applied AI

This is a fully remote position, open to applicants in United States, +4 more locations.

📋 Description

• Take charge of the access layer utilizing native connectors, MCP servers, and Databricks in both the US and EU.

• Implement short-lived tokens, enforce least-privilege read-only access, ensure zero raw PII, and maintain data residency.

• Create versioned schemas for signed credentials and action records.

• Set up deployment pipelines, authority policy as code, skill merge gates, signed builds, and Software Bill of Materials (SBOMs).

• Develop an authority lease service that includes integrated kill switches.

• Record events in append-only, hash-chained logs to ensure tamper-evident, independently verifiable auditing.

• Transition existing agents to the Core and initiate new agents tailored for each department.

• Oversee security reviews to ensure continuous read access.

• Expand the Core to accommodate bounded write operations with logged actions, idempotency keys, compensating actions, and multi-approver time-locks for financial transactions.

• Design primitives facilitating cross-institution interoperability employing signed mandates, scoped authority, and attestation receipts.

• Create self-hosted, zero-egress private stacks when necessitated by classification evidence.

• Assess advancements in agent frameworks, confidential inference, and zero-knowledge attestations.

• Conduct threat modeling for prompt injection, credential exfiltration, and confused-deputy risks.

⛳️ Requirements

• Senior-level backend engineering with a focus on Python and production experience in event-driven systems, API integration, and CI/CD.

• Experience with agent systems that compose LLM agents (such as Claude, GPT, or similar; Bedrock or comparable platforms) into operational systems.

• Ability to ensure that models are kept at the edges while maintaining a deterministic control plane.

• Security-minded approach in a regulated environment, such as MSB/VASP, banking, or similar sectors.

• Standard practices of least privilege and read-only access.

• Working knowledge of capability-based authorization including attenuable tokens, workload identity, and policy-as-code.

• Preferred qualifications include familiarity with verifiable credentials, HTTP message signatures, or emerging agent-payment mandate schemes (such as x402, AP2, MPP, Visa TAP, Mastercard Agent Pay).

• Preferred experience with self-hosted LLM stacks and confidential computing or trusted execution environments.

• Research-oriented mindset and the ability to work autonomously in a foundational role with broad responsibilities and minimal guidance.

🏝️ Benefits

• Healthcare Insurance: Zerohash covers approximately 100% of employee premiums, as well as a portion for spouses and children (U.S. only).

• Vision & Dental Insurance (U.S. only).

• Opportunity to earn equity.

• Maternity & Paternity leave available after 6 months of employment.

• WeWork All Access Membership.

• Work From Home Yearly Stipend.

• Learning & Development Yearly Stipend available after 6 months of employment.