# Staff Security Architect **Company**: Lambda **Location**: Bellevue, Washington **Work arrangement**: hybrid **Experience**: staff **Job type**: full-time **Salary**: $314K - $465K **Category**: Security **Industry**: Technology **Apply**: https://jobs.ashbyhq.com/lambda/de01a9eb-184f-445e-a9f2-94849f860b7f?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_95de059f-d37 ## Description Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU. Lambda Security protects some of the world's most valuable digital assets: invaluable training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best of breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence. As a Staff Security Architect, you will be a principal technical leader responsible for shaping Lambda's overall security architecture, with a primary focus on Data Protection and Platform Security. Your work will define secure-by-default foundational patterns across our core AI infrastructure, hardware/GPU platform layers, multi-cloud control planes, and end-to-end data lifecycles. **Responsibilities** ### Data Protection Architecture - Architect, design, and standardize end-to-end data protection strategy, encompassing data classification, cryptographic key management (KMS/HSM), data loss prevention (DLP), and privacy-preserving controls across customer data and AI model weights. - Define data lifecycle security controls for training datasets, checkpoint storage, and model artifacts across cloud and on-premises storage layers. - Drive confidential computing architectures, envelope encryption, and hardware-backed data security guarantees for high-consequence customer workloads. - Establish robust zero-trust data access policies and fine-grained authorization frameworks for sensitive platform APIs and data repositories. ### Platform Security & Infrastructure Hardening - Design and enforce core platform security architectures across multi-tenant GPU infrastructure, bare-metal clusters, hypervisors, and container orchestration platforms (Kubernetes). - Define strong tenant isolation, sandboxing, and secure virtualization controls to protect against cross-tenant side-channel and platform escape vulnerabilities. - Conduct comprehensive threat models, architectural reviews, and risk assessments for core platform services and platform control planes. ### Automation & Strategic Innovation - Prototype reference implementations and security controls in Python or Go to demonstrate secure platform integration patterns. - Pioneer AI-powered architectural security capabilities leveraging Lambda's hosted LLMs for automated threat modeling, automated policy validation, and data discovery. - Assess third-party vendor risks and build automated tooling to evaluate SaaS vendor security postures. ### Strategic Leadership & Alignment - Partner closely with Platform, Engineering, Product, and Infrastructure leaders to embed security architecture into long-term product roadmaps. - Author technical whitepapers, architectural blueprints, and customer-facing trust documentation highlighting Lambda's platform security and data protection posture. - Mentor senior engineering talent across the organization on secure design principles, platform security patterns, and threat modeling. **Requirements** - 10+ years of total engineering experience with 5+ years specializing in security architecture, platform security, or data protection at cloud/infrastructure scale. - Deep expertise in data security concepts including encryption key management (KMS/HSM), cryptographic protocols, DLP, and confidential computing primitives. - Proven track record of designing multi-tenant platform security architecture across heterogeneous infrastructure (bare-metal GPU clusters, hypervisors, KVM, Kubernetes, and public cloud). - Strong technical skills in prototyping security designs and reference code in Python, Go, or similar languages. - Demonstrated experience with threat modeling methodologies (STRIDE, PASTA, etc.) and security design reviews for high-consequence systems. - Strong communication and stakeholder management skills, with a track record of partnering effectively with IT, Legal, and HR. - Ability to balance robust enterprise security controls with employee experience and productivity. - Thrives in fast-moving, high-growth startup environments where building scalable structure is required. **Nice to Have** - Excitement about leveraging direct access to state-of-the-art LLMs to revolutionize enterprise security. - Experience building enterprise security and IAM programs at high-growth tech companies or cloud providers. - Familiarity with compliance frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA) and audit preparation. - Experience implementing Infrastructure as Code (Terraform) for managing enterprise identity and SaaS configurations. - Deep technical background allowing hands-on contribution when needed. - Experience with both build and buy decisions for security tooling. - Experience driving or providing significant evidence for compliance audits. **Benefits** - Generous cash & equity compensation. - Health, dental, and vision coverage for you and your dependents. - Wellness and commuter stipends for select roles. - 401k Plan with 2% company match (USA employees). - Flexible paid time off plan. ## Skills ### Required - data protection - platform security - encryption key management (KMS/HSM) - cryptographic protocols - DLP - confidential computing - Python - Go - threat modeling - security architecture ### Nice to have - compliance frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA) - Infrastructure as Code (Terraform) - enterprise security and IAM programs --- Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/lambda/de01a9eb-184f-445e-a9f2-94849f860b7f?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)