# Principal Security Architect

**Company**: Graphcore
**Location**: Austin, Texas; Milpitas, California, Texas; California
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/graphcore/jobs/8870804002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9c32d966-735

## Description

## Job Overview

We are seeking a Principal Security Architect to design, maintain, and secure scalable infrastructure solutions for cryptographic key management at Graphcore, a globally recognized leader in Artificial Intelligence computing systems.

## Responsibilities

- Design and deploy scalable, secure infrastructure solutions from scratch, aligned with business requirements and security standards.

- Own and govern Hardware Secure Modules.

- Develop organisational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform.

- Conduct risk and compliance assessments to support system security plans and disaster recovery strategies.

- Collaborate on requirement analysis, user and key story operations, and capacity planning to ensure optimal resource utilisation.

- Advocate for best practices in secret lifecycle management, authentication methods, and identity federation.

- Create tooling, automation, onboarding guides, and libraries to help teams access the platform easily and correctly.

## Requirements

- MS or Ph.D. in Computer Science, Computer Engineering, Cryptography, Cybersecurity, or a related highly technical field.

- 10+ years of deep technical experience and proven experience in Public Key Infrastructure, Hardware Security Modules deployment and management.

- Strong knowledge of encryption technologies, security controls, and compliance frameworks.

- Strong understanding of authentication backends (OIDC, LDAP, cloud IAM), secret engines, PKI, encryption, and token/credential lifecycle.

- Familiarity with infrastructure maintenance, disaster recovery planning, and capacity management.

- Skilled in coding standards, secure software development lifecycle, and configuration management processes.

- Familiarity with Infrastructure-as-Code (Terraform preferred) and CI/CD automation.

- Exceptional ability to distill complex, theoretical security concepts into strict engineering specifications, and the gravitas to influence engineering teams and executive leadership without direct authority.

## Differentiators

- Experience integrating Vault with cloud platforms (AWS, Azure, GCP) and CI/CD pipelines.

- Standards Body Contributions: Active participation, authorship, or contribution to industry security standards (e.g., TCG, OCP Security Project, Linux Foundation, or Arm security working groups).

- Knowledge of SPIFFE/SPIRE, workload identity, or zero-trust architectures.

- Post-Quantum Readiness: Forward-looking understanding of Post-Quantum Cryptography (PQC) and its upcoming impact on hardware lifecycle and secure boot.

- Understanding of Platform Root of Trust, Platform Identity, DICE and attestation.

## Benefits

- Medical, dental, and vision coverage, with options that may extend to eligible dependents.

- Mental health, wellness, and employee assistance resources.

- Retirement savings benefits and company contributions where applicable.

- Paid vacation, sick time, company holidays, and parental or family leave in accordance with relevant plans and policies.

- Life insurance and short-term or long-term disability coverage.

- Flexible working hours and hybrid working arrangements where compatible with the role and team requirements.

- Professional-development resources, learning programs, office amenities, and team-led activities.

## Skills

### Required
- Public Key Infrastructure
- Hardware Security Modules
- encryption technologies
- security controls
- compliance frameworks
- authentication backends
- secret engines
- PKI
- encryption
- token/credential lifecycle
- infrastructure maintenance
- disaster recovery planning
- capacity management
- coding standards
- secure software development lifecycle
- configuration management processes
- Infrastructure-as-Code
- CI/CD automation

### Nice to have
- Vault
- cloud platforms (AWS, Azure, GCP)
- CI/CD pipelines
- SPIFFE/SPIRE
- workload identity
- zero-trust architectures
- Post-Quantum Cryptography (PQC)
- Platform Root of Trust
- Platform Identity
- DICE and attestation

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/graphcore/jobs/8870804002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)