Platform Architect: Agentic AI Trust & Security (Hybrid)

Ocho; Belfast City District; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid Belfast site

Global impact

Industry standards

Job summary

Ocho in Belfast is seeking a Platform Architect to define and govern the reference architecture for a major new AI trust and identity platform. You will work across identity, authority, execution and assurance layers, guiding cross‑functional teams and aligning technology with business goals in a hybrid Belfast site.

This senior role requires deep cryptography, PKI, HSMs and workload identity expertise, with leadership experience across global teams and familiarity with standards such as

Qualifications

• Bachelor's degree in Computer Science or related field.
• 15+ years progressive technology leadership experience.
• 7+ years leading enterprise architecture or platform/security architecture for identity, cryptography or trust infrastructure products.
• Deep, applied expertise in cryptography and PKI: certificate authorities, key lifecycle and custody, HSMs, signing services and hardware roots of trust.
• Working expertise in workload identity (SPIFFE/SPIRE, SVIDs, mutual TLS) and modern delegated authorisation (OAuth 2.x, token exchange, PBAC/ABAC).
• Experience designing tamper evident or append-only verifiable systems, for example Merkle backed logs, Certificate Transparency, or equivalent.
• Deep expertise in at least one major cloud platform (Azure, AWS or GCP), including confidential computing and customer managed key management.
• Experience shipping products under third party assurance regimes such as FIPS 140-3, Common Criteria, eIDAS, SOC 2 or FedRAMP.
• Proven ability to influence executive stakeholders and lead cross-functional teams in complex global organisations.

Responsibilities

• Define and own the reference architecture spanning identity, authority, execution and assurance for a new agentic trust platform.
• Establish architectural principles, standards and governance processes across multiple product teams.
• Own the technical specification for workload identity, and credential issuance and rotation, using standards such as SPIFFE/SPIRE.
• Own the design of a cryptographically signed delegation and authorisation framework, including HSM backed signing and revocation.
• Own the design of a tamper evident, independently verifiable evidence and audit system for AI driven decisions.
• Serve as design authority and technical gate across all builds on the platform, arbitrating scope and architecture conflicts.
• Guide investment decisions on cloud platforms, cryptographic infrastructure and confidential computing.
• Represent the business in relevant industry standards bodies, converting emerging standards into product architecture.
• Partner with executive leadership, product and security teams to align technology investment with business strategy.
• Lead, mentor and develop architects and senior engineers across the platform.

Skills

Cryptography

PKI

HSMs

Workload identity

OAuth 2.x

SPIFFE/SPIRE

Education

Bachelor's degree in Computer Science or related field

Tools

Azure Cloud

AWS Cloud

GCP Cloud

Job description

Ocho in Belfast is seeking a Platform Architect to define and govern the reference architecture for a major new AI trust and identity platform. You will work across identity, authority, execution and assurance layers, guiding cross‑functional teams and aligning technology with business goals in a hybrid Belfast site.

This senior role requires deep cryptography, PKI, HSMs and workload identity expertise, with leadership experience across global teams and familiarity with standards such as