Senior Security Architect

Company Description

Open Innovation AI is a global technology company that specializes in developing advanced solutions for managing AI workloads. Its flagship product, the Open Innovation Cluster Manager (OICM), orchestrates complex AI tasks efficiently across diverse infrastructures. The platform is hardware-agnostic, optimized for various GPUs and accelerators hardware, and facilitates seamless integration and scalability for enterprise AI applications. Open Innovation AI focuses on optimizing and simplifying AI workload management and making AI technologies accessible to organizations of all sizes. With its innovative solutions, companies can reduce operational costs, accelerate time to value, and maximize their return on investment, ensuring that their AI strategies contribute directly to enhanced business outcomes.

Role Overview:

We're seeking an experienced Senior Security Architect to lead security strategy and implementation for our platform deployed across customer on-premise data centers and cloud environments.

Key Responsibilities

Security Architecture & DevSecOps

• Design end-to-end security architecture across application, Kubernetes, storage, network, and compute infrastructure for hybrid deployments (on-premise, AWS, Azure, GCP)
• Lead DevSecOps initiatives embedding security throughout SDLC with CI/CD security pipelines, automated testing (SAST, DAST, container scanning), and
• security gates
• Create threat models, perform risk assessments, and conduct security reviews of designs, code, and infrastructure
• Define security requirements for multi-tenant isolation, encryption (at rest/in transit), PKI/certificate management, and secure storage integration
• Establish security patterns for firewalls, network segmentation, VPC/VNet design, API gateways, and zero-trust architectures

Infrastructure Security & Compliance

• Design encryption strategies and controls for cloud/on-premise storage, secrets management, credential rotation, and privileged access management
• Implement hardening procedures for Kubernetes clusters, containers, storage systems, network devices, and compute workloads
• Ensure compliance with SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS standards and address data residency requirements
• Define logging, monitoring, and SIEM integration for security observability across hybrid environments
• Create security documentation including architecture diagrams, configuration guides, baselines, and runbooks

Customer Enablement

• Design solutions integrating with customer identity providers, firewalls, storage systems, cloud services, and security tools
• Provide security guidance, support assessments, audits, RFP processes, incident response, and vulnerability remediation

Required Qualifications

• 8+ years in information security, 4+ years in security architecture roles
• DevSecOps experience with security automation in CI/CD pipelines
• Deep Kubernetes security expertise (RBAC, pod security standards, network policies, secrets management)
• Extensive encryption experience: SSL/TLS, PKI, certificate management, KMS
• Strong experience securing on-premise enterprise infrastructure: firewalls, network segmentation, VPNs, perimeter security
• Experience with storage systems (cloud object/block storage, NFS, iSCSI, SAN/NAS) and enterprise data centers
• Knowledge of IAM systems (LDAP, Active Directory, SAML, OAuth/OIDC, RADIUS)
• Experience with security testing tools (SAST, DAST, SCA, vulnerability scanning) and compliance frameworks
• Strong communication skills for diverse audiences

Preferred Qualifications

• Cloud security expertise (AWS, Azure, GCP): IAM, security groups, VPC/VNet security
• Experience with security tools (Vault, kyverno, Falco, OPA, Cilium, Snyk, Aqua, Trivy, CSPM tools)
• Infrastructure as code security experience (Terraform, Ansible, Helm, Kustomize)
• AI/ML workload security knowledge
• Security certifications (CISSP, CCSP, CKS, AWS/Azure Security)