Security Architect

About Us

AI71 is an applied research team dedicated to creating helpful and responsible AI agents for knowledge workers.
Working closely with our industry partners, our cross-functional teams of AI experts build products grounded in the cutting edge research of our colleagues from the Technology Innovation Institute (TII).

We are seeking a highly experienced and strategic Security Architect to define and lead the security architecture of our AI and data platform. In this role, you will be responsible for designing secure-by-design systems across AI workloads, data pipelines, and cloud-native infrastructure, ensuring the confidentiality, integrity, and availability of our platform at scale.

You will collaborate closely with engineering, platform, and AI teams to embed security into every layer of system design, development, and deployment, while establishing standards and best practices aligned with enterprise and high-security environments.

Key Responsibilities

Security Architecture and Design
• Define and evolve the end-to-end security architecture for AI systems, data platforms, and cloud-native infrastructure.
• Establish and enforce Zero Trust principles, including identity-first security, mTLS, and fine-grained access control (RBAC/ABAC).
• Design secure patterns for distributed systems, event-driven architectures, and multi-tenant environments.

Platform and Infrastructure Security
• Define security standards for Kubernetes-based platforms, including workload isolation, network policies, and runtime protection.
• Establish container and software supply chain security practices (e.g., image scanning, SBOM, signing, and provenance).
• Design secure deployment architectures for both cloud and restricted/air-gapped environments.

AI and Data Security

• Define and implement security controls for LLM-based applications, RAG pipelines, and data platforms.
• Establish safeguards against AI-specific threats such as data poisoning, model extraction, and data leakage.

DevSecOps and Governance

• Embed security into GitOps and CI/CD workflows, including policy-as-code and automated enforcement.
• Define and maintain secure SDLC practices aligned with ISO 27001 and internal governance frameworks.
• Lead threat modeling, architecture reviews, and security validations.

Observability and Threat Detection

• Define requirements for security observability, including audit logging and anomaly detection.
• Ensure integration of security signals into observability platforms (e.g., OpenTelemetry).

Leadership and Collaboration

• Act as a security advisor to engineering and AI teams.
• Review system designs and enforce security standards.
• Mentor engineers and promote a strong culture of security awareness.

Qualifications

Required Skills and Experience

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
• 7+ years of experience in security engineering, architecture, or related roles.
• Experience designing security for distributed systems and cloud-native platforms.
• Strong understanding of Zero Trust, IAM, cryptography, and secure communication.
• Experience with DevSecOps practices and secure CI/CD pipelines.

Preferred Skills

• Experience securing AI/ML systems or data platforms.
• Familiarity with streaming technologies (e.g., Kafka, NATS).
• Experience in regulated or high-security environments.
• Certifications such as CISSP or CSSLP.
• Proficiency in Python or Bash for automation.

Why Join Us?

• Work on cutting-edge AI technologies with a focus on security and ethics.
• Shape the security architecture of a next-generation AI platform.
• Collaborate with a diverse and talented team.
• Competitive salary, equity options, and benefits.
• Opportunities for growth and leadership.

Imported from freehire's public, keyless open-job API after the index reported the posting open. The upstream record supplied this canonical employer, ATS, or official public-board URL; repost-only sources and protected portal URLs are excluded. No login, CAPTCHA, private candidate data, or protected job-board session was accessed.