Senior Solutions Architect (AI Infrastructure Security)

Join Mirantis as a Senior Solutions Architect specializing in AI Infrastructure Security. You will be responsible for defining and securing the k0rdent AI platform, creating reference architectures, and conducting research on emerging security technologies. This role combines hands-on work with research and customer engagement, and requires extensive experience in security engineering or architecture, particularly in cloud and Kubernetes environments.

- Define and publish security reference architectures and solution designs for k0rdent AI, covering various deployment models. - Research and explore emerging security technologies, standards, and threats, and prototype alternative designs in the lab. - Act as the security subject matter expert in customer discovery, design reviews, and architecture workshops, bringing thought leadership and new ideas.

- 8+ years in security engineering or security architecture, with at least 3 years securing cloud, Kubernetes or large-scale infrastructure platforms - Customer-facing experience as a solutions architect, pre-sales engineer, consultant or technical lead - Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity or a related field, or equivalent practical experience - PKI and identity: certificate lifecycle with tools such as cert-manager, mTLS, OIDC and SSO, and workload identity (e.g. SPIFFE/SPIRE) - Storage and data security: encryption at rest and in transit, key hierarchy design, and access control on shared storage - Kubernetes security: RBAC, Pod Security Standards, admission controllers and policy engines (e.g. Kyverno, OPA Gatekeeper), runtime security (e.g. Falco), and multi-tenancy patterns - Host and virtualisation security: Linux hardening (e.g. SELinux or AppArmor, CIS benchmarks), secure boot, TPM, and hypervisor and VM isolation, including KubeVirt - Secrets and key management: tools such as HashiCorp Vault or OpenBao, External Secrets Operator, cloud KMS and HSMs - Proactive. You spot risks and gaps in the product, the documentation or a customer design before you are asked, and you act on them - Network security: segmentation, firewalling, zero-trust architectures and Kubernetes network policy (e.g. Cilium, Calico) - Cloud security: designing and operating secure deployments on at least one major public cloud (AWS, Azure or GCP) and on private cloud or bare-metal infrastructure - AI security: a working understanding of how Transformer-based models are trained, packaged and served, and the threats specific to them (e.g. OWASP Top 10 for LLM Applications, MITRE ATLAS) - Curious. You dig into how attacks actually work, read the specs, advisories and source, and keep up with how AI and infrastructure threats are changing. You question established designs, including the ones customers are used to, when there is a better way - Fast learner. You get productive quickly in unfamiliar hardware, software or customer environments - Business acumen. You frame security decisions in terms of risk, cost, compliance and time-to-value, and explain them in those terms to decision makers - Software supply chain security: image signing (e.g. Sigstore/cosign), SBOMs, vulnerability scanning and SLSA concepts - Ownership. You take a reference architecture or a POC from the first sketch to a published, validated result, and you stand behind it - Programming or scripting in at least one language (Python or Go preferred), and comfortable using Git, CI and infrastructure-as-code - Experience working in an international, distributed company, across time zones and different work cultures, with Solutions Architects, Partner Management and Engineering teams - Able to adapt the message to the audience, from engineers to CISOs and customer executives - Excellent written and spoken English; you write documents others can build from - Comfortable presenting to large audiences at conferences and events, and running hands-on workshops - Experience with compliance frameworks and benchmarks relevant to cloud and AI infrastructure, such as NIST SP 800-53, NIST AI RMF, FedRAMP, SOC 2, ISO/IEC 27001, CIS benchmarks or DISA STIGs - Hands-on experience with confidential computing (e.g. AMD SEV-SNP, Intel TDX, NVIDIA GPU confidential computing) and remote attestation - Experience securing GPU cloud, neocloud or HPC environments, or NVIDIA Cloud Partner (NCP) style deployments - Offensive security or red-teaming experience, including against AI systems - Experience with DPUs (e.g. NVIDIA BlueField) for infrastructure isolation and security offload - Security certifications such as CISSP, CCSP, CKS, OSCP, or public cloud security specialty certifications - Experience with Mirantis products, MKE, k0s, k0rdent security - Contributions to open-source security or Kubernetes projects, or a track record of public talks and technical writing - Participation in standards or industry bodies (e.g. CNCF TAG Security, OpenSSF, Confidential Computing Consortium, CoSAI), or published research, CVEs, patents or white papers - Additional languages beyond English