Senior Solutions Architect – AI Infrastructure Security

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Take charge of the security solution for k0rdent AI, Mirantis's platform designed for constructing and managing GPU clouds and AI factories.

• Establish comprehensive security measures for hardware, firmware, hosts, virtual machines, Kubernetes clusters, networks, storage, secrets, certificates, models, and applications.

• Create and publish security reference architectures and solution designs for private, multi-tenant, and hybrid AI cloud implementations.

• Define defense-in-depth models, tenant isolation boundaries, security guarantees, and trade-offs.

• Align designs with customer controls and compliance frameworks.

• Investigate emerging security technologies, standards, and threats.

• Prototype and evaluate alternative designs in a laboratory setting.

• Publish internal research notes, design proposals, and relevant external technical documentation.

• Develop and execute proofs of concept with customers, partners, and utilizing Mirantis or customer hardware.

• Write automation scripts, policies, and tools using Python, Go, Bash, Ansible, Helm, Kubernetes manifests, Terraform, and policy-as-code.

• Evaluate designs and deployments through threat modeling, configuration reviews, and hands-on testing.

• Serve as a security subject matter expert during customer discovery, design reviews, and architecture workshops.

• Collaborate with customer security, risk, and compliance teams while assisting with security questionnaires and architecture evaluations.

• Team up with hardware, software, and security partners for joint designs and validations.

• Incorporate research findings into Product, Engineering, and the Mirantis security team.

• Contribute to the shaping of the k0rdent AI roadmap.

• Present at industry events, webinars, and partner summits.

• Conduct hands-on workshops and produce reference architectures, solution briefs, blog posts, and enablement content.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related field, or equivalent practical experience.

• Over 8 years of experience in security engineering or security architecture.

• At least 3 years of experience securing cloud, Kubernetes, or large-scale infrastructure platforms.

• Customer-facing experience in roles such as solutions architect, pre-sales engineer, consultant, or technical lead.

• Experience in designing and managing secure deployments on at least one major public cloud (AWS, Azure, or GCP) and on private cloud or bare-metal infrastructure.

• Knowledge of Linux hardening, secure boot, TPM, hypervisor and VM isolation, including KubeVirt.

• Expertise in Kubernetes security: RBAC, Pod Security Standards, admission controllers, policy engines, runtime security, and multi-tenancy patterns.

• Experience with secrets and key management using tools like HashiCorp Vault or OpenBao, External Secrets Operator, cloud KMS, and HSMs.

• Familiarity with PKI and identity management: cert-manager, mTLS, OIDC, SSO, and workload identity such as SPIFFE/SPIRE.

• Skills in network security: segmentation, firewalling, zero-trust architectures, and Kubernetes network policy.

• Understanding of storage and data security: encryption at rest and in transit, key hierarchy design, and shared-storage access control.

• Working knowledge of Transformer-based model training, packaging, serving, and AI-specific threats.

• Experience in software supply chain security: image signing, SBOMs, vulnerability scanning, and SLSA concepts.

• Proficiency in programming or scripting in at least one language; Python or Go is preferred.

• Comfortable using Git, CI, and infrastructure-as-code.

• Excellent written and verbal communication skills in English.

• Comfortable presenting to large audiences and conducting hands-on workshops.

• Experience working in an international, distributed company across various time zones and cultures.

• Ability to collaborate effectively with Solutions Architects, Partner Management, and Engineering teams.

• Availability for meetings that may occur outside of standard local hours.

• Nice-to-have qualifications include knowledge of compliance frameworks, confidential computing, GPU cloud/HPC security, DPUs, offensive security, familiarity with Mirantis products, security certifications, open-source contributions, public speaking, standards participation, research, CVEs, patents, white papers, and proficiency in additional languages.

🏝️ Benefits

• Opportunity to work remotely from the United States.

• Travel up to 25% for customer engagements, partner meetings, lab work, and industry events.

• Compensation and benefits tailored to the local market and employment arrangements.

• Chance to collaborate with top GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprises.

• Work alongside a world-class, distributed team.

• Opportunity to influence the product narrative and contribute to go-to-market success.