Security Architecture Lead for AI/HPC Infra (Equity)

Stealth Startup AI infrastructure; Lombardia; On-site; EUR 60,000 - 100,000; Full time

Job summary

Stealth Startup AI infrastructure in Milan, Italy seeks a Security Engineer Lead to own the security of self-contained outdoor AI/HPC compute systems and their interconnected clusters. You will shape security architecture, implement it in code, and collaborate with software, hardware, and network teams.

You will drive cloud-native infrastructure security from firmware to platform, including identity, secrets, PKI, and secure software supply chains, with a focus on multi-tenant isolation and risk

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent field.
• 7–10 years of hands-on experience in infrastructure, platform or cloud security, ideally including bare-metal infrastructure.
• Deep, hands-on expertise in Kubernetes and Linux security.
• Solid practical experience with identity, secrets and PKI, and with software supply-chain security.
• Working knowledge of secure boot, TPM 2.0 and disk encryption on physical servers.
• Ability to work in a fast-paced, early-stage environment with a high degree of ownership and autonomy.
• English speaking.

Responsibilities

• Own the threat model and security architecture of the compute system and interconnected clusters, from firmware to platform.
• Harden the Kubernetes/Talos platform: CIS baselines, admission control (OPA/Kyverno), runtime security (e.g. Falco/Tetragon), and NetworkPolicies.
• Own identity, secrets and PKI: SSO and RBAC, secrets management (e.g. Vault), an internal PKI, and key/certificate lifecycle.
• Secure the boot chain with the hardware team: secure boot, TPM-based measured boot and attestation, and signed firmware.
• Guarantee multi-tenant isolation (KubeVirt, MIG, encryption, secure wipe) and secure the software supply chain (SBOM, cosign/sigstore, scanning, GitOps).
• Define the security requirements of the physical compute infrastructure and its OT interface with energy assets, with external specialists.
• Build detection and incident response capabilities and act as technical responder during incidents; coordinate with Network Architect and GRC/Compliance.

Skills

Kubernetes security

Linux security

Identity & PKI

SBOM / software supply chain

Bare-metal infra

Threat modeling

Education

Bachelor’s degree in CS/CE/Cybersecurity

Tools

Talos Linux

KubeVirt

Ceph

GitOps/FluxCD

HSMs

Job description

Stealth Startup AI infrastructure in Milan, Italy seeks a Security Engineer Lead to own the security of self-contained outdoor AI/HPC compute systems and their interconnected clusters. You will shape security architecture, implement it in code, and collaborate with software, hardware, and network teams.

You will drive cloud-native infrastructure security from firmware to platform, including identity, secrets, PKI, and secure software supply chains, with a focus on multi-tenant isolation and risk