Description
Job Overview
We are seeking a Principal Security Architect to design, maintain, and secure scalable infrastructure solutions for cryptographic key management at Graphcore, a globally recognized leader in Artificial Intelligence computing systems.
Responsibilities
- Design and deploy scalable, secure infrastructure solutions from scratch, aligned with business requirements and security standards.
- Own and govern Hardware Secure Modules.
- Develop organisational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform.
- Conduct risk and compliance assessments to support system security plans and disaster recovery strategies.
- Collaborate on requirement analysis, user and key story operations, and capacity planning to ensure optimal resource utilisation.
- Advocate for best practices in secret lifecycle management, authentication methods, and identity federation.
- Create tooling, automation, onboarding guides, and libraries to help teams access the platform easily and correctly.
Requirements
- MS or Ph.D. in Computer Science, Computer Engineering, Cryptography, Cybersecurity, or a related highly technical field.
- 10+ years of deep technical experience and proven experience in Public Key Infrastructure, Hardware Security Modules deployment and management.
- Strong knowledge of encryption technologies, security controls, and compliance frameworks.
- Strong understanding of authentication backends (OIDC, LDAP, cloud IAM), secret engines, PKI, encryption, and token/credential lifecycle.
- Familiarity with infrastructure maintenance, disaster recovery planning, and capacity management.
- Skilled in coding standards, secure software development lifecycle, and configuration management processes.
- Familiarity with Infrastructure-as-Code (Terraform preferred) and CI/CD automation.
- Exceptional ability to distill complex, theoretical security concepts into strict engineering specifications, and the gravitas to influence engineering teams and executive leadership without direct authority.
Differentiators
- Experience integrating Vault with cloud platforms (AWS, Azure, GCP) and CI/CD pipelines.
- Standards Body Contributions: Active participation, authorship, or contribution to industry security standards (e.g., TCG, OCP Security Project, Linux Foundation, or Arm security working groups).
- Knowledge of SPIFFE/SPIRE, workload identity, or zero-trust architectures.
- Post-Quantum Readiness: Forward-looking understanding of Post-Quantum Cryptography (PQC) and its upcoming impact on hardware lifecycle and secure boot.
- Understanding of Platform Root of Trust, Platform Identity, DICE and attestation.
Benefits
- Medical, dental, and vision coverage, with options that may extend to eligible dependents.
- Mental health, wellness, and employee assistance resources.
- Retirement savings benefits and company contributions where applicable.
- Paid vacation, sick time, company holidays, and parental or family leave in accordance with relevant plans and policies.
- Life insurance and short-term or long-term disability coverage.
- Flexible working hours and hybrid working arrangements where compatible with the role and team requirements.
- Professional-development resources, learning programs, office amenities, and team-led activities.