Security Architect | Ai & Cloud Platforms

Northbridge Recruitment; Australia; Remote; AUD 120,000 - 170,000; Full time

Job summary

Northbridge Recruitment seeks a Security Architect to secure AI infrastructure across Australia. The role blends hands-on delivery with security design ownership for shared platforms and workloads.

You will lead security design, implement controls, and collaborate with platform, infra and solutions teams to enable zero-trust multi-tenancy and attestations while working with HashiCorp Vault, Kubernetes/OpenShift and GitOps tooling.

Qualifications

• Previous hands-on NVIDIA BlueField DPU deployment experience.
• Production HashiCorp Vault deployment and operational experience.
• Zero-trust multi-tenancy experience with micro-segmentation and tenant isolation.
• Confidential computing experience including attestation and data in use protection.
• Strong Kubernetes/OpenShift security expertise including RBAC and platform hardening with policy tooling.

Responsibilities

• Act as a key technical security authority collaborating with platform, infra and solutions teams to design, implement and validate security controls.
• Split role: ~60% hands-on delivery and 40% technical advisory and pre-sales support, including client workshops, scoping and estimates.
• Implement NVIDIA BlueField/DOCA security controls, micro-segmentation, and host workload isolation.
• Design and enforce zero-trust tenant isolation across shared AI infrastructure.
• Implement confidential computing and attestation to protect data in use.
• Deploy and operate HashiCorp Vault for tenant-scoped secrets management and workload identity.
• Secure Kubernetes and OpenShift with RBAC, hardening and admission policies via OPA/Kyverno.
• Embed security controls through automation and GitOps.
• Lead client technical discussions and contribute to solution designs and SLAs.

Skills

NVIDIA BlueField deployment experience

Zero-trust architecture

Kubernetes/OpenShift security

Security design and implementation

Security automation

Tools

NVIDIA BlueField/DOCA

HashiCorp Vault

OPA/Kyverno

Job description

Security Architect | NVIDIA BlueField & AI Security

Are you a Security Architect or Senior Security Engineer with hands-on NVIDIA BlueField deployment, HashiCorp Vault, zero-trust multi-tenancy and confidential computing experience?

Would you like to combine technical delivery with architecture ownership, securing advanced AI infrastructure in a specialist role open to candidates across Australia?

Please note: Previous hands-on deployment of NVIDIA BlueField DPUs, production deployment and operation of HashiCorp Vault, and practical experience implementing BOTH zero-trust multi-tenancy and confidential computing, including attestation, are essential and non-negotiable.

Our client is delivering advanced AI infrastructure and cloud platforms and is seeking a Domain Architect | AI Security to lead security design and implementation across shared infrastructure, platform services and AI workloads. You do not need to have held this exact job title. Senior and Principal Security Engineers with the required practical experience are encouraged to apply. We recognise that relevant work may involve confidential projects and may not appear on your CV.

THE ROLE

You will act as a key technical authority for security, working closely with platform, infrastructure and solutions teams to design, implement and validate security controls.

The role combines approximately 60% hands-on delivery and implementation with 40% technical advisory and pre-sales support, including client workshops, solution scoping and estimates. Your responsibilities will include:

• Implementing NVIDIA BlueField/DOCA security controls, including micro-segmentation and isolation from host workloads
• Designing and enforcing zero-trust tenant isolation across shared AI infrastructure
• Implementing confidential computing and attestation to protect data during processing
• Validating tenant isolation and preventing cross-tenant access before onboarding
• Deploying and operating HashiCorp Vault for tenant-scoped secrets management and workload identity
• Securing Kubernetes and OpenShift through access controls, admission policies and platform hardening
• Implementing identity federation and access boundaries across platform services
• Embedding security controls through automation, policy-as-code and GitOps
• Strengthening AI workload protection, software supply chain security and runtime threat detection
• Leading client technical discussions and contributing to solution designs, statements of work and delivery estimates

The environment includes NVIDIA BlueField/DOCA, NVIDIA Confidential Computing, Kubernetes/OpenShift, HashiCorp Vault, OPA/Kyverno and specialist AI security tooling.

ABOUT YOU

You will bring deep infrastructure and platform security expertise, remain comfortable working hands-on and confidently explain security decisions to engineers and senior stakeholders. You may currently be a Security Architect, Principal Security Engineer, Senior Infrastructure Security Engineer, Senior Cloud Security Engineer or Platform Security Lead. You must bring:

• Previous hands-on NVIDIA BlueField DPU deployment experience, including direct implementation of security controls using BlueField/DOCA
• Production HashiCorp Vault deployment and operational experience, including secrets engines, workload authentication, tenant separation and credential rotation
• Zero-trust multi-tenancy experience, including micro-segmentation, access boundaries and practical validation of tenant isolation
• Confidential computing experience, including trusted execution environments, attestation and protection of data in use
• Strong Kubernetes or OpenShift security expertise, including RBAC, platform hardening and admission policies using tools such as OPA or Kyverno
• Experience implementing identity federation, access controls and workload identity
• Security automation experience using tools such as Python, Ansible, Helm or GitOps
• The ability to translate security requirements into practical, repeatable controls and validate their effectiveness
• Strong communication skills and confidence leading technical discussions

We are interested in your personal implementation responsibilities, technical decisions and delivery outcomes. Experience with AI workload protection, model security, runtime detection and software supply chain controls will also be valuable. A background within a systems integrator or delivering solutions for regulated or sovereign environments would be advantageous.

ROLE DETAILS

• 12-month contract with a view to extension
• Australia-wide opportunity with remote options
• ASAP start
• Competitive contract rate, negotiable based on specialist expertise
• Hands-on architecture ownership across advanced AI infrastructure
• A combination of technical delivery, client advisory and solution design

This is an opportunity to apply deep security engineering expertise to advanced AI infrastructure and take ownership of how shared platforms and workloads are secured.

We recognise that relevant experience may involve confidential projects. Where permitted, please include a brief, non-sensitive summary of your personal work with NVIDIA BlueField deployment, HashiCorp Vault, zero-trust multi-tenancy and confidential computing.