Senior Solutions Architect – AI Infrastructure Security

This is a fully remote position, open to applicants in Europe.

📋 Description

• Take ownership of the security solutions for k0rdent AI, Mirantis’s platform dedicated to constructing and managing GPU clouds and AI factories.

• Establish comprehensive security measures for hardware, firmware, hosts, virtual machines, Kubernetes clusters, networks, storage, secrets, certificates, models, and applications.

• Create and disseminate security reference architectures and solution designs for private, multi-tenant, and hybrid AI cloud deployments.

• Define models for defense-in-depth, tenant isolation boundaries, security assurances, and associated trade-offs.

• Align designs with customer controls and regulatory frameworks.

• Design security protocols for bare-metal, host, virtual machine, Kubernetes, secrets, PKI, network, storage, and public cloud environments.

• Establish protective measures for Transformer-based models throughout their entire lifecycle.

• Safeguard inference services and AI applications from prompt injection, data exfiltration, model theft, and misuse of agent tools.

• Design isolation for shared GPU infrastructure and evaluate options for confidential computing.

• Ensure the security of software supply chains across platforms, containers, and models.

• Investigate emerging security technologies, standards, and threats.

• Prototype and evaluate alternative security designs in a laboratory setting.

• Publish internal research documentation, design proposals, and relevant external technical content.

• Develop and conduct proofs of concept in collaboration with customers, partners, and utilizing Mirantis hardware or client sites.

• Write automation scripts, policies, and tools in languages such as Python, Go, Bash, Ansible, Helm, Kubernetes manifests, Terraform, and policy-as-code.

• Evaluate designs and deployments through threat modeling, configuration reviews, and hands-on testing.

• Serve as a security subject matter expert during customer discovery, design reviews, and architecture workshops.

• Assist with security questionnaires and architecture evaluations for strategic initiatives.

• Collaborate with hardware, software, and security partners on joint solutions and validations.

• Share research findings with Product, Engineering, and the Mirantis security team to influence the k0rdent AI roadmap.

• Present at industry events, webinars, and partner summits, and conduct technical workshops.

• Author reference architectures, solution briefs, blog posts, and internal enablement materials.

⛳️ Requirements

• A Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, or equivalent practical experience.

• Over 8 years of experience in security engineering or security architecture.

• A minimum of 3 years securing cloud, Kubernetes, or large-scale infrastructure platforms.

• Customer-facing experience in roles such as solutions architect, pre-sales engineer, consultant, or technical lead.

• Experience in designing and managing secure deployments on at least one major public cloud (AWS, Azure, or GCP) and on private cloud or bare-metal infrastructures.

• Proficiency in Linux hardening, secure boot, TPM, hypervisor and VM isolation, including KubeVirt.

• Knowledge of Kubernetes security, including RBAC, Pod Security Standards, admission controllers, policy engines, runtime security, and multi-tenancy patterns.

• Skills in secrets and key management using tools like HashiCorp Vault or OpenBao, External Secrets Operator, cloud KMS, and HSMs.

• Understanding of PKI and identity management, including cert-manager, mTLS, OIDC, SSO, and workload identity.

• Experience in network security, including segmentation, firewalling, zero-trust architectures, and Kubernetes network policy.

• Knowledge of storage and data security, including encryption and access control on shared storage.

• Familiarity with Transformer-based model training, packaging, serving, and associated security threats.

• Experience in software supply chain security, covering image signing, SBOMs, vulnerability scanning, and SLSA concepts.

• Proficiency in programming or scripting in at least one language; Python or Go preferred.

• Comfortable using Git, CI, and infrastructure-as-code tools.

• Excellent written and spoken English communication skills.

• Comfortable presenting at conferences and events and leading hands-on workshops.

• Ability to adapt communication styles for engineers, CISOs, and customer executives.

• Experience working in an international, distributed company across various time zones and cultures.

• Preferable experience with compliance frameworks, confidential computing, GPU cloud or HPC environments, DPUs, offensive security, Mirantis products, security certifications, open-source contributions, public speaking, standards bodies, published research, CVEs, patents, white papers, or additional languages.

🏝️ Benefits

• Flexible remote work arrangement.

• Travel up to 25% for customer engagements, partner meetings, lab work, and industry events.

• Competitive compensation and benefits aligned with the local market and employment arrangements.

• Opportunity to collaborate with leading GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprises.

• Work alongside a world-class, distributed team.

• Chance to influence the product narrative and contribute to go-to-market success.