Senior Security Architect for Distributed Storage Platforms

Data Direct Networks; California (MO); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Vacation plans

Paid holidays

Bonus programs

Tuition reimbursement

Employee referral program

Medical, dental & vision benefits

Paid leave programs

Anniversary & recognition awards

Job summary

Data Direct Networks is seeking a Lead Engineer – Security Architecture to define and drive security for next‑gen distributed storage platforms, including S3-like object storage, POSIX/NFS file systems, and KV data services.

You will partner with storage, protocol, and platform teams to embed secure-by-design practices, establish security standards, and guide cross‑functional engineering in implementing advanced security measures at scale.

Qualifications

• 12+ years of experience in security architecture or large-scale platform engineering.
• Proven track record securing distributed storage or cloud-native infrastructure.
• Deep understanding of cryptography, PKI and key management.
• Experience integrating enterprise identity providers (LDAP, AD, OIDC, SAML).
• Strong knowledge of secure API design, TLS, SigV4, and service authentication.

Responsibilities

• Define and lead long-term security architecture for distributed storage platforms.
• Establish secure-by-design principles across data path, control plane, and protocols.
• Lead threat modeling, SSDLC practices, and security reviews across teams.
• Design enterprise IAM frameworks with RBAC/ABAC and tenant isolation.
• Collaborate to secure APIs, authentication workflows, and governance controls.

Skills

Distributed systems security

Security architecture

Advanced cryptography

IAM (Identity and Access Management)

Zero Trust

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

KMIP/KMS integrations

Job description

Data Direct Networks is seeking a Lead Engineer – Security Architecture to define and drive security for next‑gen distributed storage platforms, including S3-like object storage, POSIX/NFS file systems, and KV data services.

You will partner with storage, protocol, and platform teams to embed secure-by-design practices, establish security standards, and guide cross‑functional engineering in implementing advanced security measures at scale.