Platform Architect Agentic Security

Ocho People Ltd.; Belfast City District; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work from Belfast site

Generous annual leave

Pension plan

Job summary

Ocho People Ltd. is seeking a Platform Architect to define and govern the reference architecture for a major agentic trust and identity platform based in Belfast, with a hybrid work model.

You will drive architectural governance across multiple teams and influence executive strategy. The role demands deep cryptography expertise, workload identity experience, and a proven ability to lead complex global programs within regulated environments.

Qualifications

• Bachelor's degree in Computer Science, Engineering or related field.
• 15+ years of technology leadership experience.
• 7+ years leading enterprise or platform/security architecture for identity or trust.
• Deep cryptography, PKI, HSMs, and key management.
• Experience with workload identity and OAuth 2.x delegations.
• Experience with cryptographic delegation and verifiable technologies (Merkle/CT).
• Expertise across Azure/AWS/GCP with confidential computing.
• Experience with assurance regimes (FIPS 140-3, Common Criteria, SOC 2).
• Proven ability to influence executives and lead cross-functional teams.

Responsibilities

• Define and own the reference architecture spanning identity, authority, execution and assurance for a new agentic trust platform.
• Establish architectural principles, standards and governance across multiple product teams.
• Own the technical specification for workload identity and credential issuance/rotation.
• Design a cryptographically signed delegation and authorisation framework with HSM backing.
• Create a tamper-evident, independently verifiable evidence and audit system for AI decisions.
• Serve as design authority and technical gate across builds on the platform.
• Guide investment decisions on cloud platforms, cryptographic infrastructure and confidential computing.
• Represent the business in industry standards bodies and translate standards into architecture.
• Partner with leadership to align technology investment with business strategy.
• Lead, mentor and develop architects and senior engineers.

Skills

Tech leadership

Enterprise architecture

Crypto PKI

SPIFFE/SPIRE

OAuth 2.x

CT logs

Cloud platforms

Security standards

Stakeholder influence

Education

Bachelor's degree in CS/Engineering

Tools

SPIFFE/SPIRE

OAuth 2.x

Job description

Platform Architect Agentic Security (Belfast, Hybrid) New Company to NI

At a Glance

• Principal level architecture role defining the reference architecture for a major new AI trust and identity platform
• Deep specialism in cryptography, PKI, HSMs, workload identity and delegated authorisation
• Hybrid role based from a new Belfast engineering site, with global reach and influence
• Rare opportunity to help shape industry standards for agentic AI trust and security
• Competitive salary, disclosed on application

About the Company

Our client is a well established, global provider of digital security and identity technology , serving regulated enterprises across sectors including financial services, government and critical infrastructure. They are building a new agentic trust and identity platform that brings together decades of cryptography and identity expertise to underpin secure, accountable AI driven decision making. This is a strategically important initiative, and the business is investing in a new Belfast engineering site to support it.

The Role

As Platform Architect, you will define and govern the reference architecture underpinning a major new identity, authorisation and assurance platform designed to make AI driven decision making secure, verifiable and accountable. You will work across a four layer architecture spanning identity, authority, execution and assurance, ensuring multiple product teams operate within a single, coherent architecture and governance model. This is a senior, highly technical role with genuine influence: you will act as design authority and technical gate across the platform, represent the business in relevant industry standards discussions, and partner closely with executive, product, security and engineering leadership. It suits an experienced architect who wants to help shape how an entire industry approaches trust and security for autonomous AI systems.

Key Responsibilities

• Define and own the reference architecture spanning identity, authority, execution and assurance for a new agentic trust platform
• Establish architectural principles, standards and governance processes across multiple product teams
• Own the technical specification for workload identity, and credential issuance and rotation, using standards such as SPIFFE/SPIRE
• Own the design of a cryptographically signed delegation and authorisation framework, including HSM backed signing and revocationOwn the design of a tamper evident, independently verifiable evidence and audit system for AI driven decisions
• Serve as design authority and technical gate across all builds on the platform, arbitrating scope and architecture conflicts
• Guide investment decisions on cloud platforms, cryptographic infrastructure and confidential computing
• Represent the business in relevant industry standards bodies, converting emerging standards into product architecture
• Partner with executive leadership, product and security teams to align technology investment with business strategy
• Lead, mentor and develop architects and senior engineers across the platform

What You'll Need

Essential:

• Bachelor's degree in Computer Science, Engineering or a related field
• 15+ years' progressive technology leadership experience
• 7+ years leading enterprise architecture or platform/security architecture for identity, cryptography or trust infrastructure products
• Deep, applied expertise in cryptography and PKI: certificate authorities, key lifecycle and custody, HSMs, signing services and hardware roots of trust
• Working expertise in workload identity (SPIFFE/SPIRE, SVIDs, mutual TLS) and modern delegated authorisation (OAuth 2.x, token exchange, PBAC/ABAC)
• Experience designing tamper evident or append-only verifiable systems, for example Merkle backed logs, Certificate Transparency, or equivalent
• Deep expertise in at least one major cloud platform (Azure, AWS or GCP), including confidential computing and customer managed key management
• Experience shipping products under third party assurance regimes such as FIPS 140-3, Common Criteria, eIDAS, SOC 2 or FedRAMP
• Proven ability to influence executive stakeholders and lead cross-functional teams in complex global organisations

Desirable / Nice to Have:

• Experience deploying and securing Generative AI or LLM solutions at enterprise scale
• Knowledge of agentic AI architectures, AI orchestration frameworks, MCP, or agent-to-agent interoperability standards
• Experience in highly regulated industries such as financial services or insurance

Why Apply?

• Competitive salary, disclosed on application
• Genuine influence over the architecture of a major new AI trust and identity platform
• Represent the business in shaping emerging global standards for agentic AI trust
• Hybrid working from a new Belfast engineering site
• Backing of a well resourced, global digital security and identity technology business
• High impact, strategically important initiative with genuine influence at the top table
• Strong autonomy and a genuine design-authority mandate
• Generous annual leave and pension