Zero-Trust IAM Architect for AI Security & Compute

Sierra Ventures; San Francisco (CA); On-site; USD 300,000 - 470,000; Full time

Benefits offered by this job

Top-tier compensation

Stock options

Health & wellness

Meals

Life & family

Vacation days

Sponsorship support

Team building

Job summary

Reflection is seeking a Head of Identity and Access Management to architect, build, and operate a zero-trust IAM fabric for a scalable AI research environment. You will lead the design of a cloud-native identity boundary, implement phishing-resistant authentication, and create just-in-time credentialing for researchers and engineers across multi-cloud GPU clusters.

The role blends security architecture with software engineering, requiring cryptographic depth and developer-friendly tooling to

Qualifications

• 15+ years of dedicated experience in identity security, security architecture, or infra engineering in fast-growing environments.
• Proven track record building zero-trust identity infrastructures at scale including hardware-backed authentication and JIT credentials.
• Hands-on experience securing IAM boundaries across AWS/GCP and containerized environments including Kubernetes identity federation.

Responsibilities

• Design and implement a cloud-native, zero-trust IAM architecture using modern IdPs and edge-enabled access networks.
• Develop and enforce phishing-resistant authentication and device-posture driven access controls.
• Build and maintain short-lived, just-in-time credentialing for access to large GPU clusters across cloud providers.

Skills

Security architecture

Identity management

Zero trust

Cloud security

Go/Python/Rust

Tools

Go

Python

Rust

Terraform

Pulumi

Kubernetes

Teleport

HashiCorp Boundary

Job description

Reflection is seeking a Head of Identity and Access Management to architect, build, and operate a zero-trust IAM fabric for a scalable AI research environment. You will lead the design of a cloud-native identity boundary, implement phishing-resistant authentication, and create just-in-time credentialing for researchers and engineers across multi-cloud GPU clusters.

The role blends security architecture with software engineering, requiring cryptographic depth and developer-friendly tooling to