Platform Architect - Agentic Trust

Entrust; Minnesota; On-site; USD 140,000 - 190,000; Full time

Job summary

Entrust is seeking a Platform Architect to maintain architectural coherence across the Entrust Agentic Trust Layer and multiple lines of business. You will help define a four-plane reference architecture—Identity, Authority, Execution, and Assurance—and ensure scalable, secure integration across teams.

You will work with executive leaders, product, engineering, and security to align investments with business goals while advancing industry standards for agentic trust and digital identity.

Qualifications

• Senior-level architecture experience across multiple product lines.
• Ability to define and govern cross-cutting platform reference architectures.
• Experience partnering with executives, product, engineering, and security teams.

Responsibilities

• Define and maintain architecture strategy for the four planes (Identity, Authority, Execution, Assurance).
• Own dependency contracts and interface definitions for supplying primitives.
• Serve as design authority on all build tracks and arbiter in case of conflicts.
• Partner with standards bodies and ecosystem stakeholders to shape industry standards.

Skills

Architecture leadership

Platform governance

Identity security

SPIFFE/SPIRE

HSM integration

Tools

SPIFFE/SPIRE

HSM

Job description

Join us at Entrust

At Entrust, we're shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.

Get to Know Us

Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It's the curiosity, dedication, and innovation that drive our success and help us anticipate the future.

Platform Architect, Entrust Agentic Trust

Position Summary

The Platform Architect, is accountable for maintaining architectural coherence across the Entrust Agentic Trust Layer and every Line of Business capability that supplies into it, ensuring independent teams and product lines operate within a common architecture and governance framework.

Entrust's operating doctrine for the Agentic Trust Layer is to complement the enterprise agentic control plane with trusted identity, security, evidence, and assurance capabilities. Our strategy is to architect a solution that brings together decades of Entrust expertise across both product and non-product domains, while actively shaping current and emerging industry standards to ensure they are fit for purpose for the agentic enterprise. By establishing a trusted foundation for AI-driven decision making and automation, Entrust enables organizations to realize the productivity, innovation, and growth benefits of AI with confidence, accountability, and governance.

This role is accountable for defining and governing the four-plane reference architecture, Identity, Authority, Execution, and Assurance, as well as the composition model, trust-plane architecture, and dependency contracts that enable multiple product teams to operate as a unified, integrated trust layer. The mandate is to ensure cryptographic assurance, interoperability, scalability, and business agility across the platform while maintaining a cohesive architecture and operating model. The role also serves as a key industry representative, partnering with standards bodies and ecosystem stakeholders to help shape emerging standards for the agentic enterprise, with particular emphasis on agentic trust, digital identity,

This role partners closely with executive leadership, product teams, engineering, security, and business stakeholders to ensure technology investments deliver measurable business value while maintaining scalability, security, and operational excellence. The Platform Architect is a named gate on every Entrust Agentic Trust Layer build track

Key Responsibilities

Trust-Layer Architecture Leadership

• Define and maintain the architecture strategy and roadmap for the four planes, and hold the reference architecture as the single normative source across product lines.
• Establish architectural principles, standards, patterns, and governance processes, including the Boundary Review process that arbitrates scope conflicts between Entrust Agentic Trust Layer and the Lines of Business.
• Own the Line of Business dependency contracts: interface definitions, service levels, versioning commitments, and internal transfer-pricing terms for each supplying primitive.
• Ensure technology investments align with business objectives and strategic priorities.
• Serve as design authority and technical gate on all Entrust Agentic Trust Layer build tracks, and as the arbiter of record when product, engineering, and Line of Business positions conflict.

Agent Identity, Authority, & Evidence Architecture

• Own the technical specification of the Agent Passport, including SPIFFE/SPIRE-based workload identity, SVID issuance and rotation, attestation of the issuing workload, and binding to Entrust CA roots and HSM-protected keys.
• Own the Permission Slip framework: HSM signing, the five binding elements, delegation chain semantics, revocation and expiry, and the Permission Slip Exchange for presentation across organizational boundaries. The term is always used in full and never shortened in specification or customer-facing material.
• Own the Evidence Ledger and Replay architecture: append-only, tamper-evident, independently verifiable records of authorization and action, with a replay capability that reconstructs an agent episode for an auditor without relying on the agent's own account of it.
• Own the Policy Engine, MCP Gateway, and Just-in-Time Authorization architecture across the Authority and Execution planes, including inline latency budgets, degradation modes, and explicit fail-open versus fail-closed policy per control point.
• Own the Continuous Authentication Engine architecture, including signal ingestion, session-risk evaluation, and the re-authorization path when confidence in a human principal or an agent's context degrades mid-session.
• Own Content Provenanc