Senior Security Architect – Distributed Storage & S3 KV

DDN; California; Hybrid; USD 210,000 - 320,000; Full time

Job summary

DDN is seeking a Sr. Staff Security Architect to lead end-to-end security across distributed storage platforms, including S3-compatible systems and KV data services. You will partner with Data Path, Control Plane, and Ecosystem teams to embed security by design at scale.

You will shape encryption strategies, IAM frameworks, and multi-tenant isolation, while mentoring engineering teams and shaping secure APIs and workflows for high-performance workloads.

Qualifications

• Bachelor’s or Master’s degree in CS/Engineering or related field.
• 12+ years of experience in security architecture or distributed systems.
• Proven experience designing security for large-scale distributed systems or storage platforms.
• Strong understanding of data path vs. control plane security.
• Deep expertise in encryption technologies and key management.
• Experience with external KMS (KMIP) integration.
• Strong IAM knowledge including RBAC/ABAC, SSO, MFA, federation.
• Experience with LDAP/Active Directory/OIDC.
• Familiarity with TLS 1.3, mTLS, and request signing (SigV4).
• Multi-tenant design and policy enforcement.
• Logging/auditing/SIEM for security monitoring.
• Ability to collaborate with protocol, storage, and platform teams.

Responsibilities

• Defining and driving security architecture across data path, control plane, and protocol layers of distributed storage systems.
• Partnering with engineering teams to embed security into S3, POSIX, and KV cache data services.
• Building scalable encryption, identity, and access control frameworks for multi-tenant environments.
• Strengthening tenant isolation, auditability, and compliance across the platform.
• Ensuring secure integration across ecosystem components and external services.
• Leading cross-team security initiatives that influence system design and evolution.

Skills

Security architecture

Distributed systems

Encryption technologies

Key management systems

IAM (RBAC/ABAC/SSO/MFA)

LDAP/Active Directory/OIDC

Secure API design

TLS 1.3/mTLS

Multi-tenant security

Logging/Auditing/SIEM

Threat modeling/SSDLC

Collaboration across teams

Education

Bachelor’s or Master’s degree in Computer Science/Engineering or related field

Job description

DDN is seeking a Sr. Staff Security Architect to lead end-to-end security across distributed storage platforms, including S3-compatible systems and KV data services. You will partner with Data Path, Control Plane, and Ecosystem teams to embed security by design at scale.

You will shape encryption strategies, IAM frameworks, and multi-tenant isolation, while mentoring engineering teams and shaping secure APIs and workflows for high-performance workloads.