Principal Security Architect — Private AI Cloud Infrastructure

Aionia Group; Reston (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

Aionia Group is seeking a Principal Security Architect to design and secure the infrastructure for private AI cloud systems. This role focuses on protecting sensitive machine learning datasets and requires deep expertise in Linux security, Kubernetes, and cloud architecture. Ideal candidates have significant experience with large-scale distributed systems and possess a thorough understanding of security principles against real-world threats. The position offers a unique opportunity to work in an innovative AI research environment.

Qualifications

• Experience securing large distributed systems at scale.
• Deep understanding of defensive security and real-world attacker behavior.
• Strong familiarity with Linux systems security.

Responsibilities

• Architect a private cloud environment for machine learning systems.
• Develop security architecture for GPU compute clusters.
• Define identity and cryptography interactions across layers.
• Design systems under persistent adversarial pressure.
• Implement secure infrastructure deployments.

Skills

Infrastructure security

Distributed systems security

Linux systems security

Kubernetes security

Cloud security architecture

Infrastructure automation

Tools

Terraform

Pulumi

Job description

Security Architecture · Private AI Cloud · Reston / McLean, VA

Principal Security Architect

Not a traditional cloud security role. Design and secure the private cloud infrastructure used to train and operate large-scale AI systems — from GPU compute clusters and networking layers to cryptographic controls protecting sensitive models and research data.

Securing the Infrastructure Behind Advanced AI

We are partnering with a well-funded AI research organization building advanced machine learning systems that require extremely secure and resilient infrastructure. They are seeking a Principal Security Architect to lead the design of a private cloud environment used to train and operate large-scale AI systems.

“This is not a traditional cloud security role. The focus is designing and securing the infrastructure itself — at the architectural level.”

What You’ll Do

• Design Secure Infrastructure Architect a private cloud environment designed to protect highly sensitive machine learning systems and datasets.
• Network & Compute Isolation Develop security architecture for distributed GPU compute clusters — hardened networking, segmentation, and zero-trust communication between services.
• Security Architecture Define how identity, cryptography, and infrastructure controls interact across compute, storage, and networking layers.
• Threat Modeling Design systems assuming persistent adversarial pressure and build architectures that remain resilient under compromise scenarios.
• Infrastructure Automation Work with platform engineering teams to implement secure infrastructure deployments using IaC and immutable infrastructure principles.

What They’re Looking For

Ideal Profile — Must-Have

• Thinks about infrastructure security at the architectural level, not the tool level
• Has experience securing large distributed systems at scale
• Understands both defensive security and real-world attacker behavior
• Enjoys solving difficult systems problems — not managing tools or processes

Technical Background

Strong candidates typically have experience with several of the following:

• Linux systems security at depth
• Kubernetes and container orchestration security
• Cloud security architecture (AWS, GCP, or private cloud)
• Hardware-rooted security — HSMs, TEEs, and confidential computing
• Infrastructure automation — Terraform or Pulumi
• Systems programming in Go, Rust, or similar

Technical Domain

The Organization

About the Opportunity

This role is with a confidential client operating in advanced AI research. The organization is building high-performance compute infrastructure designed to support next-generation machine learning systems.

You will work alongside world‑class engineers focused on distributed systems, machine learning infrastructure, and applied security. Selected applicants may be asked to sign an NDA prior to the interview process.