Sr. Security Architect
Location: Frisco, TX (Onsite)
Duration: 12 Months
The Mission:
Client is launching a critical, top-priority security modernization initiative. We are seeking a visionary Lead Cryptography & Next-Gen Infrastructure Security Architect to shield our cloud-native platforms from the next decade of digital threats.
This role operates at the cutting edge of frontier security engineering. You will spearhead our transition into Post-Quantum Cryptography (PQC), architect advanced privacy-preserving runtimes, implement real-time kernel-level observability, and construct highly secure AI/LLM inference pipelines.
Mandatory Niche Skillset:
Candidates must possess direct, demonstrable experience in the following advanced domains:
• Advanced Cryptography: Production-grade implementation of Homomorphic Encryption, Secure Multi-party Computation (SMPC), and Zero Knowledge Proofs (ZKP).
• Kernel & Runtime Defense: Deep expertise in eBPF Security Monitoring and Runtime Application Self-Protection (RASP) frameworks.
Core Qualifications & Experience:
⊛ 10+ years of progressive experience in enterprise cybersecurity architecture and infrastructure engineering.
⊛ Post-Quantum Strategy: Proven track record designing and implementing Post-Quantum Cryptography (PQC) strategies alongside robust crypto-agility frameworks.
⊛ Confidential Computing: Hands-on mastery of hardware-level Confidential Computing using Trusted Execution Environments (TEEs).
⊛ Identity & Zero Trust: Experience deploying Identity Threat Detection & Response (ITDR) solutions and establishing workload identities with SPIFFE/SPIRE for service-to-service authentication.
⊛ AI Pipeline Security: Hardened experience protecting live AI inference pipelines built on TensorRT-LLM and Triton Inference Server.
⊛ Cloud-Native Governance: Extensive familiarity managing Kubernetes-native security policies via Kyverno to guarantee multi-cluster policy-as-code enforcement.
⊛ Platform Engineering Integration: Experience embedding security guardrails natively into developer workflows utilizing Backstage IDP.
⊛ Cost Governance: Ability to design security structures that remain strictly aligned with enterprise FinOps principles.
Key Responsibilities:
⊛ Crypto-Agility & Evolution: Formulate and roll out enterprise-wide, future-proofed cryptographic standards resilient against quantum threats.
⊛ Advanced Defense Deployment: Architect systems using SMPC, Homomorphic Encryption, and ZKPs to protect multi-tenant enterprise workflows.
⊛ Runtime Guardrails: Oversee deployment of eBPF-based security monitoring tools and RASP configurations to track and prevent active zero-day runtime exploits.
⊛ AI Infrastructure Hardening: Partner with AI/ML infrastructure squads to guarantee total data isolation and isolation boundaries for foundational large language models.
⊛ Cross-Functional Governance: Sync with risk management, platform infrastructure, and compliance leads to ensure alignment with standard threat modeling frameworks (STRIDE, MITRE Telecommunication&CK).
Note:
If the candidate lacks direct experience with a specific tool or framework mentioned, they must explicitly state the alternative technologies they have utilized in their resume.
Pre-Screening Questions:
Q1: Does he/she have experience Post-Quantum Cryptography (PQC) strategies and crypto-agility frameworks?
Q2: Does he/she have experience using Trusted Execution Environments (TEEs)?
Q3: Does he/she have experience leveraging SPIFFE/SPIRE for zero-trust service-to-service authentication?
Q4: Does he/she have experience in utilizing TensorRT-LLM?
Q5: Does he/she have experience in building policies using Kyverno?
Q6: Does he/she have knowledge of FinOps principles?
Q7: Does he/she has experience in implementation of Homomorphic Encryption, Secure Multi-party Computation (SMPC), and Zero Knowledge Proofs (ZKP)
Q8: Does he/she has experience in eBPF Security Monitoring and Runtime Application Self-Protection (RASP) frameworks.
Q9: Does he/she has experience with threat modeling frameworks (STRIDE, MITRE Telecommunication&CK)?
