Senior Security Architect - Distributed Storage

Data Direct Networks; California (MO); On-site; USD 190,000 - 240,000; Full time

Benefits offered by this job

Highly Competitive Vacation Plans

Paid Holidays

Bonus Programs

Tuition Reimbursement

Employee Referral Program

Excellent Medical, Dental and Vision

Paid Leave Programs

Anniversary and Recognition Awards

Job summary

Data Direct Networks is seeking a Sr. Staff Security Architect to lead end-to-end security for its distributed storage platforms, including S3-compatible systems and POSIX file systems.

You will partner with Data Path, Control Plane, and Ecosystem teams to embed security by design, drive risk assessments, and guide implementation at scale across multi-tenant environments. This role demands deep cryptography, IAM, and secure API expertise.

Qualifications

• Bachelor’s or Master’s degree in CS, Eng or related field.
• 12+ years in security architecture or distributed systems.
• Experience designing security for large-scale storage platforms.
• Strong understanding of data path vs control plane security.
• Expertise in encryption technologies and key management.
• Experience integrating with external KMS using KMIP.
• IAM expertise: RBAC, ABAC, SSO, MFA, federation.
• Experience with LDAP/AD and OIDC.
• Familiarity with TLS 1.3 and request signing (SigV4).
• Multi-tenant systems design and policy enforcement.
• Logging, auditing, SIEM integration.
• Strong cross-team collaboration.

Responsibilities

• Lead design and implementation of end-to-end security architecture for distributed storage platforms, including S3-compatible systems, POSIX file systems, and KV cache–based data services.
• Partner with Data Path engineering teams to secure data movement across storage tiers, including encryption, integrity validation, and secure I/O handling.
• Lead threat modeling, security reviews, and SSDLC practices across the platform.
• Define IAM integrating enterprise identity providers such as LDAP, Active Directory, OIDC, and Keycloak, supporting SSO, MFA, and federation.
• Architect fine-grained authorization models using RBAC and ABAC across tenants, datasets, and resources.
• Design multi-tenant isolation mechanisms across namespaces, policies, encryption boundaries, and resource quotas.
• Collaborate with Control Plane teams to define secure APIs, authentication/authorization workflows, policy enforcement, and tenant lifecycle management.
• Work with Protocol and Ecosystem teams to secure S3 and POSIX/NFS interfaces, including request signing, session management, and endpoint security.
• Define and enforce encryption strategies for data at rest and in transit, including tenant-specific keys and dataset-level encryption policies.
• Drive observability and monitoring strategies to detect anomalous behavior, abnormal access patterns, and potential data exfiltration across the platform.
• Provide technical leadership and mentorship across cross-functional engineering teams.

Skills

Security architecture

Distributed systems

Threat modeling

Encryption & key management

IAM & access control

RBAC/ABAC

Secure SDLC

Protocol security

Multi-tenant isolation

Security leadership

Education

Bachelor's or Master’s degree in Computer Science/Engineering

Tools

KMIP/KMS integration

LDAP / Active Directory

OIDC

Keycloak

TLS 1.3 / mutual TLS

SSO / MFA / Federation

SigV4

Job description

Data Direct Networks is seeking a Sr. Staff Security Architect to lead end-to-end security for its distributed storage platforms, including S3-compatible systems and POSIX file systems.

You will partner with Data Path, Control Plane, and Ecosystem teams to embed security by design, drive risk assessments, and guide implementation at scale across multi-tenant environments. This role demands deep cryptography, IAM, and secure API expertise.