Senior AI Cloud Security Architect - Data & Platform

Lambda; United States; Hybride; USD 190 000 - 240 000; Plein temps

Résumé du poste

Lambda is seeking a principal security architect to shape our data protection and platform security across AI infrastructure. You will design secure-by-default patterns, spanning cloud and on-prem resources, with a focus on protecting training data, model weights, and sensitive assets.

You will report to the CISO and drive encryption at rest/in transit, key management, confidential computing, and robust tenant isolation. The role blends architecture leadership with hands-on policy verification.

Qualifications

• Experience defining secure-by-default security architecture for AI infrastructure.
• Expertise in data protection, encryption, and key management (KMS/HSM).
• Proficiency with zero-trust access policies and fine-grained authorization.
• Experience with data protection for training data and model weights.

Responsabilités

• Architect end-to-end data protection across cloud and on-prem storage.
• Define data lifecycle security controls for datasets, checkpoints, and artifacts.
• Drive confidential computing architectures and envelope encryption.
• Establish zero-trust policies for platform APIs and data repositories.
• Lead threat modeling and platform policy verification using AI-driven methods.

Connaissances

Data protection architecture

KMS/HSM

DLP

Encryption at rest/in transit

Zero-trust security

Threat modeling

Platform security

Cloud and on‑prem security

Policy verification

Formation

Bachelor's degree in Computer Science, Cybersecurity, or related field

Outils

AWS/Azure/GCP security platforms

Confidential computing platforms

Description du poste

Lambda is seeking a principal security architect to shape our data protection and platform security across AI infrastructure. You will design secure-by-default patterns, spanning cloud and on-prem resources, with a focus on protecting training data, model weights, and sensitive assets.

You will report to the CISO and drive encryption at rest/in transit, key management, confidential computing, and robust tenant isolation. The role blends architecture leadership with hands-on policy verification.