Staff Security Architect
Staff Security Architect at Lambda (AI GPU cloud): a principal technical leader reporting to the CISO who sets the security architecture for data protection and platform security — DLP, encryption/KMS, confidential computing, and tenant isolation across multi-cloud and bare-metal GPU/Kubernetes infrastructure — prototyping controls in Python/Go and pioneering AI-driven security tooling. Hybrid, 4
- Compensation
- $349K–$465K / yr
- Location
- Bellevue Office
- Work setup
- Hybrid
- Seniority
- Staff
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 10+ years of total engineering experience with 5+ years in security architecture, platform security, or data protection at cloud/infrastructure scale
- Deep expertise in data security: encryption key management (KMS/HSM), cryptographic protocols, DLP, and confidential computing primitives
- Track record designing multi-tenant platform security architecture across heterogeneous infrastructure (bare-metal GPU clusters, hypervisors, KVM, Kubernetes, public cloud)
- Strong technical skills prototyping security designs and reference code in Python, Go, or similar languages
- Experience with threat modeling methodologies (STRIDE, PASTA, etc.) and security design reviews for high-consequence systems
- Strong communication and stakeholder management skills, partnering effectively with IT, Legal, and HR
- Ability to balance robust enterprise security controls with employee experience and productivity
- Thrives in fast-moving, high-growth startup environments where building scalable structure is required
Nice to have
- Excitement about leveraging LLMs for enterprise security (AI-assisted access reviews, automated SaaS risk assessments, intelligent policy generation)
- Experience building enterprise security and IAM programs at high-growth tech companies or cloud providers
- Familiarity with compliance frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA) and audit preparation
- Experience implementing Infrastructure as Code (Terraform) for managing enterprise identity and SaaS configurations
- Deep technical background allowing hands-on contribution when needed
- Experience with both build and buy decisions for security tooling
- Experience driving or providing significant evidence for compliance audits (SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP)
Full description
Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.
If you'd like to build the world's best AI cloud, join us.
*Note: This position requires presence in our Bellevue, San Francisco, or San Jose office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.
About the Role
Lambda Security protects some of the world's most valuable digital assets: invaluable training data, model weights representing immense computational investments, and the sensitive inputs required to leverage best of breed AI models. We're responsible for securing every byte that powers breakthrough artificial intelligence.
Reporting to the CISO, you'll be a principal technical leader responsible for shaping Lambda's overall security architecture, with a primary focus on Data Protection and Platform Security. Your work will define secure-by-default foundational patterns across our core AI infrastructure, hardware/GPU platform layers, multi-cloud control planes, and end-to-end data lifecycles.
You will directly impact the security posture of our high-performance computing environment by architecting robust data loss prevention (DLP), encryption at rest and in transit, key management (KMS/HSM), confidential computing, and tenant isolation models. Leveraging Lambda's hosted LLMs, you'll pioneer AI-driven security architecture capabilities—such as automated threat modeling, sensitive data discovery, and platform policy verification.
If you're excited about setting the architectural vision for data protection and platform security in the world's most demanding AI infrastructure, we want to talk.
We value diverse backgrounds, experiences, and skills, and we are excited to hear from candidates who can bring unique perspectives to our team. If you do not exactly meet this description but believe you may be a good fit, please still apply and help us understand your readiness for a Staff Security Architect role. Your application is not a waste of our time.What You’ll Do
Data Protection Architecture:
- Architect, design, and standardize end-to-end data protection strategy, encompassing data classification, cryptographic key management (KMS/HSM), data loss prevention (DLP), and privacy-preserving controls across customer data and AI model weights
- Define data lifecycle security controls for training datasets, checkpoint storage, and model artifacts across cloud and on-premises storage layers