Senior AI-Native Security Architect

Confidential; Lisboa; On-site; EUR 70,000 - 100,000; Full time

Job summary

Confidential is building an AI-native security platform where security architecture guides agent-supported software development, autonomous systems, data platforms and cloud estates.

You will shape identity, trust, policy enforcement and provenance to enable scalable automation, working with security leadership and engineering teams to translate requirements into reusable platform patterns.

Qualifications

• Experience in security architecture across cloud-native, application or platform environments.
• Deep understanding of identity, authorization, trust boundaries and policy enforcement in distributed systems.
• Experience with workload identity, non-human identities, credential management, federation and delegated access.
• Strong understanding of secure software delivery, CI/CD, infrastructure as code and software supply chain security.
• Ability to design security controls for systems that can autonomously consume information, make decisions, invoke tools and perform actions.
• Strong understanding of cloud platforms, APIs, containers, Kubernetes, networking and modern distributed architectures.
• Understanding of AI and autonomous-system security risks, including prompt injection, untrusted context, tool misuse, excessive permissions and unsafe delegation.
• Understanding of data security across relational, graph and retrieval architectures, including authorization, provenance, derived information and tenant isolation.
• Ability to translate threat models, security policy and risk requirements into practical architecture, reusable engineering standards and platform capabilities.
• Strong communication in English and collaboration skills, with the ability to provide senior technical security leadership across engineering, data, platform and security teams.

Responsibilities

• Define the security architecture for agent-supported software development and delivery, including generated code, automated testing, build processes, infrastructure changes, deployment and operational actions.
• Design the trust and control architecture for autonomous agents, orchestration platforms and AI-enabled workflows, including identity, delegated authority, tool access, credential use and policy enforcement.
• Establish security patterns for autonomous execution, defining where actions can run independently and where deterministic validation, additional authorization or human approval is required.
• Design security controls for data and knowledge platforms, including knowledge graphs, retrieval systems, derived information, provenance, context assembly, tenant boundaries and access enforcement.
• Define identity and authorization models across users, workloads, services, agents and tools, including non-human identities, short-lived credentials, least privilege and delegated access.
• Establish software supply chain security across source code, generated code, dependencies, models, build environments, infrastructure definitions, artifacts and deployments.
• Design controls for emerging AI and automation threats, including prompt injection, malicious or poisoned context, tool misuse, excessive agency, privilege escalation and cross-tenant risks.
• Define reusable security capabilities and engineering patterns for application, platform and data teams rather than relying on one-off security implementations.
• Establish technical security architecture across cloud platforms, APIs, Kubernetes, networking, enterprise integrations and supporting technology services.
• Lead technical threat modelling and define the audit, observability and provenance requirements needed to reconstruct and investigate automated decisions and actions.

Skills

Security architecture

Identity and access control

Workload identity

Secure software delivery

Autonomous systems security

Cloud platforms & Kubernetes

AI security risks

Data security & provenance

Threat modelling

English communication & leadership

Job description

Confidential is building an AI-native security platform where security architecture guides agent-supported software development, autonomous systems, data platforms and cloud estates.

You will shape identity, trust, policy enforcement and provenance to enable scalable automation, working with security leadership and engineering teams to translate requirements into reusable platform patterns.