Global Cloud & AI Security Architect

KLA; Ann Arbor (MI); On-site; USD 111,000 - 163,000; Full time

Benefits offered by this job

Total Rewards

Medical, Dental, Vision

401(K) with company match

Employee Stock Purchase Plan (ESPP)

Job summary

KLA is seeking an experienced Cloud & AI Security Architect to define and implement security strategies for enterprise cloud, Generative AI, and AI applications in a scalable enterprise environment. You will collaborate with Cloud, AI/ML, Engineering, Data and Cybersecurity teams to ensure secure-by-design implementations.

The role emphasizes threat modeling, security architecture, and governance, with a focus on Zero Trust, IAM and data protection across multiple cloud platforms.

Qualifications

• Experience with AI security platforms and enterprise AI governance.
• Strong understanding of IAM, Zero Trust, network security and data protection.
• Experience with DevSecOps and Infrastructure-as-Code security.
• Experience securing cloud-native technologies including containers, Kubernetes, and microservices.
• Strong knowledge of IAM, Zero Trust, network security, data protection, and DLP.
• Experience with DevSecOps and Infrastructure-as-Code security.
• Ability to evaluate new AI and cloud technologies and translate risks into practical security controls.
• Strong communication, presentation, and cross-functional collaboration skills.

Responsibilities

• AI Security: Define security architecture for Generative AI, LLMs, agents, copilots and AI applications.
• Cloud Security: Define security architecture for AWS, Azure and/or GCP environments and secure cloud workloads.
• Security Architecture & Strategy: Create cloud and AI security standards, perform threat modeling and advisory with engineering teams.
• Establish security standards for enterprise use of AI platforms like ChatGPT, Copilot, Claude.
• Secure AI agents and their access to applications, data, APIs, and enterprise tools.
• Define security architecture for AWS, Azure, and/or GCP environments.
• Implement Zero Trust and least-privilege across cloud environments.
• Partner with Cloud and DevOps teams to integrate security into CI/CD and IaC.
• Create cloud and AI security standards and reference architectures.

Skills

AI Security

CNAPP/CWPP/CIAM/DLP

Security Automation

Python/API Integrations

Security Certifications

DSPM

DLP

OWASP LLM

MITRE ATLAS

AI governance

Python

API integrations

Security automation

Cloud security architecture

AWS

Azure

GCP

Tools

AWS

Azure

GCP

Job description

To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology. Group/Division KLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.

What You'll Do

In this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise. The Cloud & AI Security Architect will define and implement security strategies for enterprise cloud, Generative AI, and AI applications. This role will work closely with Cloud, AI/ML, Engineering, Data, and Cybersecurity teams to ensure new cloud and AI technologies are secure by design.

Key Responsibilities

• AI Security
  Define security architecture for Generative AI, LLMs, AI agents, copilots, and AI applications.
  Identify and mitigate AI risks including prompt injection, data leakage, unauthorized access, insecure AI agents, and excessive permissions.
  Develop security controls for AI platforms, RAG, vector databases, APIs, and AI tools.
  Establish security standards for enterprise use of ChatGPT, Microsoft Copilot, Claude, and other AI platforms.
  Secure AI agents and their access to applications, data, APIs, and enterprise tools.
  Evaluate AI security solutions and emerging technologies through POCs and architecture assessments.
  Develop an AI Security roadmap and governance framework.
• Cloud Security
  Define security architecture for AWS, Azure, and/or GCP environments.
  Secure cloud workloads, applications, containers, Kubernetes, APIs, and serverless services.
  Define security controls for identity, access management, network security, data protection, encryption, and logging.
  Implement Zero Trust and least-privilege principles across cloud environments.
  Partner with Cloud and DevOps teams to integrate security into CI/CD and Infrastructure-as-Code.
  Identify cloud security gaps and provide practical remediation plans.
• Security Architecture & Strategy
  Create cloud and AI security standards, reference architectures, and security patterns.
  Perform threat modeling and security assessments for new AI and cloud solutions.
  Work with engineering teams to embed security-by-design into technology initiatives.
  Evaluate security products, vendors, and emerging technologies.
  Develop and maintain the Cloud & AI Security roadmap.
  Communicate security risks and recommendations to technical teams and senior leadership.

Preferred Skills

• Experience with AI Security / CNAPP / CSPM / CWPP / CIEM / DSPM / DLP technologies.
• Knowledge of OWASP Top 10 for LLM Applications and MITRE ATLAS.
• Experience with AI security platforms and enterprise AI governance.
• Experience with security automation and Python/API-based integrations.
• CISSP, CCSP, cloud security, or AI security certifications are a plus.

Minimum Qualifications

• 8+ years of experience in cybersecurity, cloud security, security architecture, or related areas.
• Strong experience with cloud security architecture across AWS, Azure, or GCP.
• Strong understanding of Generative AI, LLMs, AI agents, RAG, APIs, and AI security risks.
• Experience securing cloud-native technologies including containers, Kubernetes, and microservices.
• Strong knowledge of IAM, Zero Trust, network security, data protection, and DLP.
• Experience with DevSecOps and Infrastructure-as-Code security.
• Ability to evaluate new AI and cloud technologies and translate risks into practical security controls.
• Strong communication, presentation, and cross-functional collaboration skills.

About KLA

We provide advanced inspection tools, metrology systems, process solutions, and computational analytics that make electronics possible, tackling complex challenges. From electron and photon optics to machine learning and data analytics, we seek perfection at the most fundamental level of matter in the universe. If you want to make electronics that push industries forward and make the world a better place, join us.

Total Rewards

Total Rewards Base Pay Range: $111,100.00 - $162,967.00 Annually Primary Location: USA-MI-Ann Arbor-KLA KLA’s total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave. Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

Use of AI Statement

At KLA, our interviews seek to understand your individual skills, problem-solving approach and authentic thinking. To ensure a fair and consistent evaluation, the use of AI, recording tools or other technologies to generate, suggest or provide responses during interviews—whether virtual or in person—is not permitted unless explicitly approved in advance as part of a reasonable accommodation or invited by the interviewer. Use of these tools may interfere with our ability to evaluate your individual qualifications and affect your candidacy. KLA is committed to advancing innovation through responsible AI, and we value candidates who share this mindset.

Equal Opportunity Statement

KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at [e-mail] or at [phone] to request accommodation. For additional information, view the US Know Your Rights poster on the U.S. Equal Employment Opportunity Commission website. We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.

Additional Information

Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment. Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLA’s Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to [e-mail] to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.