Senior Solutions Architect – AI Infrastructure Security

Mirantis

. Own the security solutioning of k0rdent AI, Mirantis's platform for building and operating GPU clouds and AI factories .

Posted 10/8/2026full-timeRemote • Massachusetts • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security solutioning for AI cloud platforms, with a strong focus on Kubernetes security, cloud infrastructure protection, and secure software supply chains. Proficient in designing security architectures and engaging with customer security teams to ensure compliance and risk management.

Highest-signal resume keywords

Security EngineeringKubernetes SecurityCloud SecurityPython ProgrammingCustomer-Facing Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitectureLinux HardeningNetwork SecuritySecrets ManagementData SecurityThreat ModellingSoftware Supply Chain SecurityTransformer-Based ModelsInfrastructure as CodePublic Cloud Security

Soft Skills

Excellent CommunicationPresentation SkillsCollaboration

Tools & Technologies

KubernetesHashiCorp VaultAWSAzureGCPTerraformAnsibleGitCI/CDMTLS

Industry Keywords

CybersecurityZero-Trust ArchitecturesCompliance FrameworksGPU Cloud SecurityHPC Security

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityGoogle Cloud PlatformKubernetesLinuxPythonTerraformVaultGo

About the role

Key responsibilities & impact

Own the security solutioning of k0rdent AI, Mirantis's platform for building and operating GPU clouds and AI factories
Define end-to-end security for hardware, firmware, hosts, virtual machines, Kubernetes clusters, networks, storage, secrets, certificates, models and applications
Design and publish security reference architectures and solution designs for private, multi-tenant and hybrid AI cloud deployments
Define defence-in-depth models and tenant isolation boundaries across the stack
Map designs to customer controls and frameworks and document risk, cost, performance and operability trade-offs
Design security for bare-metal hosts, virtual machines, Kubernetes, secrets, PKI, networks, storage and public cloud deployments
Define lifecycle protection for Transformer-based models, training data, model registries, inference services and AI applications
Address prompt injection, data and model exfiltration, model theft and agentic tool-access abuse
Secure software supply chains for platforms, containers and models
Research emerging security technologies, standards and threats, and prototype alternative designs in the lab
Publish internal research notes, design proposals and appropriate external papers, blog posts or talks
Build and run proofs of concept with customers, partners, Mirantis labs and customer sites
Write automation, policies and tooling using Python, Go, Bash, Ansible, Helm, Kubernetes manifests, Terraform and policy-as-code
Assess designs and deployments through threat modelling, configuration review and hands-on testing
Act as security subject matter expert in customer discovery, design reviews and architecture workshops
Engage customer security, risk and compliance teams and support security questionnaires and architecture reviews
Work with hardware, software and security partners on joint designs and validations
Feed research results back to Product, Engineering and the Mirantis security team and help shape the k0rdent AI roadmap
Present at industry events, webinars and partner summits and run technical workshops
Write reference architectures, solution briefs, blog posts and internal enablement content

Requirements

What you’ll need

Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity or a related field, or equivalent practical experience
8+ years in security engineering or security architecture
At least 3 years securing cloud, Kubernetes or large-scale infrastructure platforms
Customer-facing experience as a solutions architect, pre-sales engineer, consultant or technical lead
Experience designing and operating secure deployments on at least one major public cloud (AWS, Azure or GCP) and on private cloud or bare-metal infrastructure
Linux hardening, secure boot, TPM, hypervisor and VM isolation, including KubeVirt
Kubernetes security: RBAC, Pod Security Standards, admission controllers, policy engines, runtime security and multi-tenancy patterns
Secrets and key management with tools such as HashiCorp Vault or OpenBao, External Secrets Operator, cloud KMS and HSMs
PKI and identity: cert-manager, mTLS, OIDC, SSO and workload identity
Network security: segmentation, firewalling, zero-trust architectures and Kubernetes network policy
Storage and data security: encryption at rest and in transit, key hierarchy design and access control on shared storage
Working understanding of Transformer-based models, their training, packaging and serving, and related threats
Software supply chain security: image signing, SBOMs, vulnerability scanning and SLSA concepts
Programming or scripting in at least one language; Python or Go preferred
Comfortable using Git, CI and infrastructure-as-code
Excellent written and spoken English
Comfortable presenting to large audiences and running hands-on workshops
Experience working in an international, distributed company across time zones and work cultures
Ability to travel up to 25%
Equivalent practical experience may substitute for the bachelor's degree
Nice-to-have qualifications include compliance frameworks, confidential computing, GPU cloud or HPC security, DPU security, offensive security, Mirantis products, security certifications, open-source contributions, public talks, standards participation, research, CVEs, patents, white papers and additional languages

Benefits

Comp & perks

Remote work arrangement
Travel of up to 25% for customer engagements, partner meetings, lab work and industry events
Work with a distributed, international team
Opportunity to build the observability foundation for the AI cloud era
Collaboration with leading GPU cloud operators, NeoClouds, sovereign clouds, and AI-first enterprises
Opportunity to shape the product narrative and influence go-to-market success