Staff Security Architect

Lambda; United States; Hybrid; USD 190,000 - 240,000; Full time

Job summary

Lambda is seeking a principal security architect to shape our data protection and platform security across AI infrastructure. You will design secure-by-default patterns, spanning cloud and on-prem resources, with a focus on protecting training data, model weights, and sensitive assets.

You will report to the CISO and drive encryption at rest/in transit, key management, confidential computing, and robust tenant isolation. The role blends architecture leadership with hands-on policy verification.

Qualifications

• Experience defining secure-by-default security architecture for AI infrastructure.
• Expertise in data protection, encryption, and key management (KMS/HSM).
• Proficiency with zero-trust access policies and fine-grained authorization.
• Experience with data protection for training data and model weights.

Responsibilities

• Architect end-to-end data protection across cloud and on-prem storage.
• Define data lifecycle security controls for datasets, checkpoints, and artifacts.
• Drive confidential computing architectures and envelope encryption.
• Establish zero-trust policies for platform APIs and data repositories.
• Lead threat modeling and platform policy verification using AI-driven methods.

Skills

Data protection architecture

KMS/HSM

DLP

Encryption at rest/in transit

Zero-trust security

Threat modeling

Platform security

Cloud and on‑prem security

Policy verification

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

AWS/Azure/GCP security platforms

Confidential computing platforms

Job description

Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.

Note: This position requires presence in our Bellevue, San Francisco, or San Jose office location 4 days per week; Lambda's designated work from home day is currently Tuesday.

About the Role

Lambda Security protects some of the world's most valuable digital assets: invaluable training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best of breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence.

Reporting to the CISO, you'll be a principal technical leader responsible for shaping Lambda's overall security architecture, with a primary focus on Data Protection and Platform Security. Your work will define secure-by-default foundational patterns across our core AI infrastructure, hardware/GPU platform layers, multi-cloud control planes, and end-to-end data lifecycles.

You will directly impact the security posture of our high-performance computing environment by architecting robust data loss prevention (DLP), encryption at rest and in transit, key management (KMS/HSM), confidential computing, and tenant isolation models. Leveraging Lambda's hosted LLMs, you'll pioneer AI-driven security architecture capabilities - such as automated threat modeling, sensitive data discovery, and platform policy verification.

We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team.

Your application is not a waste of our time.

What You'll Do

• Data Protection Architecture: Architect, design, and standardize end-to-end data protection strategy, encompassing data classification, cryptographic key management (KMS/HSM), data loss prevention (DLP), and privacy-preserving controls across customer data and AI model weights
• Define data lifecycle security controls for training datasets, checkpoint storage, and model artifacts across cloud and on-premises storage layers
• Drive confidential computing architectures, envelope encryption, and hardware-backed data security guarantees for high-consequence customer workloads
• Establish robust zero-trust data access policies and fine-grained authorization frameworks for sensitive platform APIs and data repositories
• Platform Security Infrastructur