Sr. Security Architect

Connect Tech+Talent; Frisco (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Connect Tech+Talent in Frisco, TX is seeking a Sr. Security Architect to lead cryptographic strategy and secure AI pipelines. The role focuses on PQC adoption, confidential computing, and kernel-level observability, with on-site work required in Frisco.

The ideal candidate has a decade of cybersecurity architecture experience, hands-on TEEs, and expertise in ITDR/SPIFFE, eBPF, and RASP to safeguard multi-tenant enterprise environments and AI inference platforms.

Qualifications

• 10 years of progressive experience in enterprise cybersecurity architecture and infra engineering.
• Experience designing PQC strategies and crypto-agility frameworks.
• Hands-on with TEEs and confidential computing hardware.
• Experience deploying ITDR and SPIFFE/SPIRE for service auth.
• Security hardening for AI inference pipelines (TensorRT-LLM, Triton).
• Governance across Kubernetes-native policies with Kyverno and dev workflows.

Responsibilities

• Formulate enterprise cryptographic standards resilient to quantum threats.
• Architect systems using SMPC, HE, and ZKPs for multi-tenant workflows.
• Oversee eBPF security monitoring tools and RASP configurations.
• Partner with AI/ML teams to isolate data for foundational models.
• Coordinate threat modeling per STRIDE and MITRE ATT&CK with risk teams.

Skills

Advanced Cryptography

Kernel & Runtime Defense

Post-Quantum Strategy

Confidential Computing

Identity & Zero Trust

AI Pipeline Security

Cloud-Native Governance

Platform Engineering Integration

Cost Governance

Tools

eBPF

RASP

Kyverno

Backstage IDP

TensorRT-LLM

Triton Inference Server

Job description

Job Description

Sr. Security Architect

Location: Frisco, TX (Onsite- local to TX or willing to relocate on own expenses)

Duration: 12 Months

This role operates at the cutting edge of frontier security engineering. You will spearhead our transition into Post-Quantum Cryptography (PQC), architect advanced privacy-preserving runtimes, implement real-time kernel-level observability, and construct highly secure AI/LLM inference pipelines.

Mandatory Niche Skillset:

Candidates must possess direct, demonstrable experience in the following advanced domains:

• Advanced Cryptography: Production-grade implementation of Homomorphic Encryption, Secure Multi-party Computation (SMPC), and Zero Knowledge Proofs (ZKP).
• Kernel & Runtime Defense: Deep expertise in eBPF Security Monitoring and Runtime Application Self-Protection (RASP) frameworks.

Core Qualifications & Experience:

• 10 years of progressive experience in enterprise cybersecurity architecture and infrastructure engineering.
• Post-Quantum Strategy: Proven track record designing and implementing Post-Quantum Cryptography (PQC) strategies alongside robust crypto-agility frameworks.
• Confidential Computing: Hands-on mastery of hardware-level Confidential Computing using Trusted Execution Environments (TEEs).
• Identity & Zero Trust: Experience deploying Identity Threat Detection & Response (ITDR) solutions and establishing workload identities with SPIFFE/SPIRE for service-to-service authentication.
• AI Pipeline Security: Hardened experience protecting live AI inference pipelines built on TensorRT-LLM and Triton Inference Server.
• Cloud-Native Governance: Extensive familiarity managing Kubernetes-native security policies via Kyverno to guarantee multi-cluster policy-as-code enforcement.
• Platform Engineering Integration: Experience embedding security guardrails natively into developer workflows utilizing Backstage IDP.
• Cost Governance: Ability to design security structures that remain strictly aligned with enterprise FinOps principles.

Key Responsibilities:

• Crypto-Agility & Evolution: Formulate and roll out enterprise-wide, future-proofed cryptographic standards resilient against quantum threats.
• Advanced Defense Deployment: Architect systems using SMPC, Homomorphic Encryption, and ZKPs to protect multi-tenant enterprise workflows.
• Runtime Guardrails: Oversee deployment of eBPF-based security monitoring tools and RASP configurations to track and prevent active zero-day runtime exploits.
• AI Infrastructure Hardening: Partner with AI/ML infrastructure squads to guarantee total data isolation and isolation boundaries for foundational large language models.
• Cross-Functional Governance: Sync with risk management, platform infrastructure, and compliance leads to ensure alignment with standard threat modeling frameworks (STRIDE, MITRE ATT&CK).