Principal Security Architect - Distributed Storage

DDN; United States; Remote; USD 180,000 - 280,000; Full time

Job summary

DDN is seeking a Principal Engineer – Security Architecture to shape the security strategy for next-generation distributed storage platforms (S3/object, POSIX, KV). You will define secure-by-design architectures across data path, control plane, and ecosystem layers, driving high-scale, multi-tenant infrastructure for AI-driven workloads.

You will lead cross-functional teams, establish security standards, and shepherd implementations with a focus on IAM, encryption, KMS, and robust policy

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, Cybersecurity, or related field.
• 12+ years in security architecture, distributed systems security, or large-scale platform engineering.
• Proven track record securing large-scale distributed systems and cloud-native infrastructure.
• Deep knowledge of distributed system architectures, data path and control plane security.
• Extensive cryptography and PKI expertise with secure key management.
• Advanced IAM familiarity (RBAC/ABAC, SSO, MFA, federation).
• Experience with external KMS platforms using KMIP or equivalents.

Responsibilities

• Define and lead long-term security architecture for distributed storage platforms.
• Establish security standards across data path, control plane, and protocol layers.
• Partner with data path teams to secure high-performance data movement with encryption and integrity checks.
• Drive threat modeling and SSDLC practices across initiatives.
• Design IAM frameworks with LDAP/AD, OIDC, SSO, MFA, and federated authorization.
• Implement fine-grained RBAC/ABAC and tenant-scoped access controls.
• Collaborate on secure APIs, authentication workflows, and platform governance.
• Lead encryption and key management strategies for data at rest and in transit.

Skills

Security architecture

Distributed systems

IAM

Encryption

Key management

PKI

Zero Trust

Threat modeling

SSO/MFA

Education

Bachelor’s or Master’s in CS/Engineering/Cybersecurity

Tools

KMIP

TLS 1.3

SigV4

Job description

DDN is seeking a Principal Engineer – Security Architecture to shape the security strategy for next-generation distributed storage platforms (S3/object, POSIX, KV). You will define secure-by-design architectures across data path, control plane, and ecosystem layers, driving high-scale, multi-tenant infrastructure for AI-driven workloads.

You will lead cross-functional teams, establish security standards, and shepherd implementations with a focus on IAM, encryption, KMS, and robust policy