Security Architect

About the company

• Graphcore is a globally recognized leader in Artificial Intelligence computing systems.
• The company designs advanced semiconductors and data center hardware that provide the specialized processing power needed to drive AI innovation.
• As part of the SoftBank Group, Graphcore is opening a new AI Engineering Campus in Austin.

About the role

• We are seeking a Principal Security Architect to design, maintain and secure scalable infrastructure solutions for cryptographic key management.
• You will be responsible for evaluating, deploying and managing Hardware Secure Modules from the ground up, ensuring compliance with standards across different regions.
• You will drive and implement policies for key and certificate creation, rotation, and revocation.

Responsibilities

• Design and deploy scalable, secure infrastructure solutions from scratch, aligned with business requirements and security standards.
• Hardware Secure Module ownership and governance.
• Develop organizational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform.
• Conduct risk and compliance assessments to support system security plans and disaster recovery strategies.
• Collaborate on requirement analysis, user and key story operations, and capacity planning.
• Advocate for best practices in secret lifecycle management, authentication methods, and identity federation.
• Create tooling, automation, onboarding guides, and libraries to help teams access the platform easily and correctly.

Requirements

• Education: MS or Ph.D. in Computer Science, Computer Engineering, Cryptography, Cybersecurity, or a related highly technical field.
• Experience: 10+ years of deep technical experience and proven experience in Public Key Infrastructure, Hardware Security Modules deployment and management.
• Strong knowledge of encryption technologies, security controls, and compliance frameworks.
• Strong understanding of authentication backends (OIDC, LDAP, cloud IAM), secret engines, PKI, encryption, and token/credential lifecycle.
• Familiarity with infrastructure maintenance, disaster recovery planning, and capacity management.
• Skilled in coding standards, secure software development lifecycle, and configuration management processes.
• Familiarity with Infrastructure-as-Code (Terraform preferred) and CI/CD automation.
• Leadership & Communication: Exceptional ability to distill complex, theoretical security concepts into strict engineering specifications.

Differentiators

• Experience integrating Vault with cloud platforms (AWS, Azure, GCP) and CI/CD pipelines.
• Standards Body Contributions: Active participation, authorship, or contribution to industry security standards (e.g., TCG, OCP Security Project, Linux Foundation, or Arm security working groups).
• Knowledge of SPIFFE/SPIRE, workload identity, or zero-trust architectures.
• Post-Quantum Readiness: Forward-looking understanding of Post-Quantum Cryptography (PQC) and its upcoming impact on hardware lifecycle and secure boot.
• Understanding of Platform Root of Trust, Platform Identity, DICE and attestation.

Conditions

• Medical, dental, and vision coverage, with options that may extend to eligible dependents.
• Mental health, wellness, and employee assistance resources.
• Retirement savings benefits and company contributions where applicable.
• Paid vacation, sick time, company holidays, and parental or family leave.
• Life insurance and short-term or long-term disability coverage.
• Flexible working hours and hybrid working arrangements where compatible with the role and team requirements.
• Professional-development resources, learning programs, office amenities, and team-led activities.