HPC Security Architect: Secure Research Compute

Stony Brook University; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Stony Brook University invites applications for an HPC Security Architect to design, implement, and govern security across its advanced research computing ecosystem, including AMA27, SeaWulf, NVWulf, and ClinWulf.

The role partners with DoIT, SBMIT, Research Security, IRB, and faculty to embed secure-by-design principles, ensure HIPAA/NIST 800-171/NIH GDS compliance, and advance AI governance in a university-scale HPC environment.

Qualifications

• Bachelor's degree; or nine years of related cybersecurity experience in research computing or large-scale distributed systems.
• 5+ years of cybersecurity experience in research computing or large-scale distributed systems.
• Experience with HIPAA, NIST 800-171, and regulated data environments.
• Experience with Identity and access management architectures.
• Experience with network and system security design.
• Experience with Linux systems, high-performance networking, and storage architectures.
• Ability to translate complex regulatory requirements into technical implementations.

Responsibilities

• Lead design, implementation, and governance of security architecture across Stony Brook University's advanced research computing ecosystem (AMA27, SeaWulf, NVWulf, ClinWulf).
• Establish a comprehensive, risk-based security framework ensuring HIPAA, NIST 800-171, NIH GDS, and AI governance compliance.
• Collaborate with DoIT, SBMIT, Research Security, IRB, and faculty to embed secure-by-design principles across compute, storage, data workflows, and collaborative research environments.
• Design and maintain multi-tier security architecture for research computing environments spanning SeaWulf, NVWulf, ClinWulf, and AMA27 (NSF Tier-1 HPC).
• Define reference architectures for secure compute, storage (GPFS/Arcastream), and high-speed networking (InfiniBand).
• Establish segmentation strategies across research tiers and lead adoption of zero trust principles in HPC environments.
• Align HPC security strategy with institutional and SUNY-wide initiatives (Empire AI).
• Architect and enforce IAM integration (e.g., SailPoint, federated access, MFA); implement RBAC/ABAC for HPC datasets.
• Design secure data pipelines for clinical/genomic/imaging datasets; oversee data protection strategies and encryption.

Skills

Cybersecurity

IAM architectures

Network security design

Linux systems

High-performance networking

Storage architectures

Regulatory translation

Research computing

Education

Bachelor's degree

Experience in cybersecurity 9 years in lieu of degree

Tools

SailPoint

Federated access (InCommon)

SAML/OIDC

GPFS/Arcastream

InfiniBand

Job description

Stony Brook University invites applications for an HPC Security Architect to design, implement, and govern security across its advanced research computing ecosystem, including AMA27, SeaWulf, NVWulf, and ClinWulf.

The role partners with DoIT, SBMIT, Research Security, IRB, and faculty to embed secure-by-design principles, ensure HIPAA/NIST 800-171/NIH GDS compliance, and advance AI governance in a university-scale HPC environment.