Senior Solutions Architect - AI Infrastructure Security (Remote, East Coast)

About the role

Mirantis, a Kubernetes-native AI infrastructure company, is looking for a Senior Solutions Architect with deep security expertise to join the Voyager team in its Office of the CTO. You will own the security solutioning of k0rdent AI, the platform for building and operating GPU clouds and AI factories, from metal to model. The role is remote, based in the United States with a strong preference for the East Coast, and combines research with hands-on, customer-facing work.

Key responsibilities

• Design and publish security reference architectures and solution designs for single-tenant private AI clouds, multi-tenant GPU clouds and hybrid deployments, defining a defence-in-depth model and tenant isolation boundaries.
• Cover bare-metal and host security (secure boot, TPM attestation, BMC and Redfish hardening, hardened Linux), VM security (hypervisor and KubeVirt hardening, VM isolation, PCI passthrough and SR-IOV), Kubernetes security (RBAC, Pod Security Standards, admission control, policy-as-code, runtime security), secrets management, PKI, network and storage security, and public cloud landing zones.
• Secure AI model and application lifecycles, including model provenance and signing, inference service protection against prompt injection and data exfiltration, GPU isolation (MIG, vGPU, passthrough) and confidential computing options, and software supply chain security (image signing, SBOMs, vulnerability management).
• Research emerging threats and technologies (confidential computing, remote attestation, post-quantum cryptography, model signing), prototype designs in the lab, and present findings internally and externally.
• Build and validate proofs of concept with customers and partners, write automation and tooling (Python, Go, Ansible, Terraform, Kubernetes manifests), and run threat modelling and configuration reviews.
• Act as security subject matter expert in customer discovery, design reviews and architecture workshops, and present at industry events and run hands-on workshops.

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity or a related field, or equivalent practical experience.
• 8+ years in security engineering or security architecture, with at least 3 years securing cloud, Kubernetes or large-scale infrastructure platforms.
• Customer-facing experience as a solutions architect, pre-sales engineer, consultant or technical lead.
• Curious, ownership-driven, proactive, fast learner, business-minded, and able to communicate clearly in excellent written and spoken English.
• Nice to have: compliance framework experience (FedRAMP, SOC 2, ISO/IEC 27001, etc.), confidential computing and GPU cloud experience, offensive security or red-teaming experience, and security certifications such as CISSP, CCSP, CKS or OSCP.

Required skills

• Cloud security on AWS, Azure or GCP and private or bare-metal infrastructure.
• Linux hardening (SELinux/AppArmor, CIS benchmarks), secure boot, TPM, hypervisor and VM isolation (KubeVirt).
• Kubernetes security (RBAC, Pod Security Standards, admission controllers, Kyverno, OPA Gatekeeper, Falco).
• Secrets management (Vault/OpenBao, External Secrets Operator, KMS/HSM) and PKI (cert-manager, mTLS, OIDC, SPIFFE/SPIRE).
• Network security (segmentation, zero-trust, Kubernetes network policy, Cilium/Calico) and storage encryption.
• AI security (OWASP Top 10 for LLM Applications, MITRE ATLAS) and software supply chain security (Sigstore/cosign, SBOMs, SLSA).
• Scripting in Python or Go, Git, CI and infrastructure-as-code.