Senior Security Architect - Distributed Storage

DDN; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

DDN is seeking a Sr. Staff Security Architect to lead the design and implementation of end-to-end security across distributed storage platforms, including S3-compatible systems, POSIX file systems, and KV data services.

This architecture role collaborates with data-path, control plane, and ecosystem teams to embed security across all layers, influence engineering design, and guide secure implementation at scale for multi-tenant and AI-driven workloads.

Qualifications

• Bachelor’s or Master’s degree in CS/Engineering.
• 12+ years of security architecture or distributed systems experience.
• Proven experience designing security for large-scale distributed systems or storage platforms.
• Strong understanding of data path vs. control plane architectures and their security implications.
• Deep expertise in encryption technologies, key management systems, and cryptographic frameworks.
• Experience integrating with external KMS solutions using KMIP or similar protocols.
• Strong knowledge of IAM, including RBAC, ABAC, SSO, MFA, and federation.
• Experience working with enterprise identity providers such as LDAP, Active Directory, and OIDC.
• Familiarity with secure API design, TLS 1.3, mutual TLS, and request signing mechanisms (e.g., SigV4).
• Experience designing multi-tenant systems with strong isolation and policy enforcement.
• Knowledge of logging, auditing, and SIEM integration for security monitoring and compliance.
• Ability to collaborate effectively with protocol, storage, and platform engineering teams.

Responsibilities

• Lead end-to-end security architecture for distributed storage platforms.
• Partner with Data Path engineers to ensure secure, high-performance data movement and encryption.
• Lead threat modeling, security reviews, and SSDLC practices across the platform.
• Define IAM integrating enterprise identity providers with SSO, MFA, and federation.
• Architect fine-grained RBAC/ABAC across tenants, datasets, and resources.
• Design multi-tenant isolation across namespaces, policies, encryption boundaries, and quotas.
• Collaborate with Control Plane teams to define secure APIs, authentication, and policy enforcement.
• Work with Protocol and Ecosystem teams to secure S3 and POSIX/NFS interfaces.
• Define and enforce encryption strategies for data at rest and in transit.
• Drive observability and monitoring to detect anomalous behavior and exfiltration.
• Provide technical leadership and mentorship across cross-functional teams.

Skills

Security architecture

Distributed systems

Encryption

IAM

RBAC

ABAC

KMS

TLS 1.3

Federation

Zero Trust

Threat modeling

Education

Bachelor’s or Master’s degree in CS/Engineering

Tools

KMIP

SigV4

OIDC

Job description

DDN is seeking a Sr. Staff Security Architect to lead the design and implementation of end-to-end security across distributed storage platforms, including S3-compatible systems, POSIX file systems, and KV data services.

This architecture role collaborates with data-path, control plane, and ecosystem teams to embed security across all layers, influence engineering design, and guide secure implementation at scale for multi-tenant and AI-driven workloads.