Security Architect, AI Research Infrastructure

MATS Research; West Virginia; Hybrid; GBP 155,000 - 220,000; Full time

Benefits offered by this job

Lunch/Meals

Travel for conferences

Professional development

Flexible PTO

Hybrid work

Insurance

Pension/401(k)

Job summary

MATS Research is seeking a Security Architect to secure our research pipeline and compute environments. You will define hardened DevSecOps practices across AWS, GCP and neocloud footprints, implement policy-as-code, and manage secure CI/CD and artifact provenance.

You will work closely with researchers and engineers to enable safe, rapid experimentation. Responsibilities span hardened Linux OS and SLURM cluster security, supply-chain integrity, and cross-cloud access control.

Qualifications

• Strong Linux security and kernel hardening experience on HPC/infrastructure
• Hands-on Terraform and CI/CD pipelines enforcing security models
• Secure cloud-native environments (AWS, GCP, neoclouds)
• Experience securing an HPC scheduler (SLURM) and container platforms
• Threat-modeling against sophisticated adversaries and IP theft
• Ability to explain security trade-offs to researchers and leadership

Responsibilities

• Harden DevSecOps and CI/CD pipelines with security guardrails
• Secure the software supply chain with robust signing and SBOMs
• Define agent sandboxing and least-privilege execution
• Own multi-cloud and cluster security across providers
• Harden the research cluster (Linux OS, SLURM, sudoers)
• Protect research data and model weights with access controls
• Secure data infrastructure including provenance and privacy controls
• Monitor and detect with SIEM integration and anomaly detection
• Enable frontier access through audits and partnerships
• Own incident response for compute clusters and artifacts

Skills

Linux security

Terraform

CI/CD

Cloud security

HPC/SLURM

Threat modeling

Communication with researchers

Tools

GitHub Actions

GitLab CI

Sigstore

Snyk

Trivy

COSign

OPA/policy-as-code

Job description

MATS Research is seeking a Security Architect to secure our research pipeline and compute environments. You will define hardened DevSecOps practices across AWS, GCP and neocloud footprints, implement policy-as-code, and manage secure CI/CD and artifact provenance.

You will work closely with researchers and engineers to enable safe, rapid experimentation. Responsibilities span hardened Linux OS and SLURM cluster security, supply-chain integrity, and cross-cloud access control.