Senior Security Architect: Distributed Storage & IAM

DDN; Sacramento (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

DDN is seeking a Sr. Staff Security Architect to design and implement end-to-end security across distributed storage platforms, including S3-compatible systems and KV/data services.

You will partner with engineering teams to embed encryption, IAM, RBAC/ABAC, and secure API workflows across data path, control plane, and ecosystem domains. The role demands deep expertise in encryption, key management, and secure design for multi-tenant, AI-driven workloads, with a track record of influencing

Qualifications

• 12+ years of experience in security architecture, infrastructure security, or distributed systems.
• Proven experience designing security for large-scale distributed systems or storage platforms.
• Strong understanding of data path vs. control plane architectures and their security implications.
• Deep expertise in encryption technologies, key management systems, and cryptographic frameworks.
• Experience integrating with external KMS solutions using KMIP or similar protocols.
• Strong knowledge of IAM, including RBAC, ABAC, SSO, MFA, and federation.
• Experience working with enterprise identity providers such as LDAP, Active Directory, and OIDC.
• Familiarity with secure API design, TLS 1.3, mutual TLS, and request signing mechanisms (e.g., SigV4).
• Experience designing multi-tenant systems with strong isolation and policy enforcement.
• Knowledge of logging, auditing, and SIEM integration for security monitoring and compliance.

Responsibilities

• Lead the design and implementation of end-to-end security architecture for distributed storage platforms.
• Partner with Data Path engineering teams to ensure secure, high-performance data movement and encryption.
• Lead threat modeling, security reviews, and SSDLC practices across the platform.
• Define IAM integrating enterprise providers, supporting SSO, MFA, and federation.
• Architect fine-grained authorization models across tenants, datasets, and resources.
• Design multi-tenant isolation mechanisms across namespaces, policies, and encryption boundaries.
• Collaborate to define secure APIs, authentication workflows, policy enforcement, and tenant lifecycle.
• Work with S3 and POSIX/NFS interfaces to secure endpoints, signing, and session management.
• Define and enforce data-at-rest and data-in-transit encryption strategies.
• Drive observability and monitoring to detect anomalous behavior and data exfiltration.
• Provide technical leadership and mentor cross-functional teams on secure design.

Skills

Security architecture

Distributed systems

IAM

RBAC

ABAC

SSO

MFA

Encryption

KMS

TLS 1.3

Education

Bachelor’s or Master’s degree in Computer Science or Engineering

Tools

KMIP

SIEM

Job description

DDN is seeking a Sr. Staff Security Architect to design and implement end-to-end security across distributed storage platforms, including S3-compatible systems and KV/data services.

You will partner with engineering teams to embed encryption, IAM, RBAC/ABAC, and secure API workflows across data path, control plane, and ecosystem domains. The role demands deep expertise in encryption, key management, and secure design for multi-tenant, AI-driven workloads, with a track record of influencing