Senior Solutions Architect - AI Infrastructure Security (Remote Europe)

About the role

Mirantis is looking for a Senior Solutions Architect with deep security expertise to join the Voyager team in its Office of the CTO. You will own the security solutioning of k0rdent AI, a platform for building and operating GPU clouds and AI factories, defining how k0rdent AI environments are secured end to end and turning that design into reference architectures, working code and proofs of concept. The role is remote, with a strong preference for the US East Coast, and involves research, architecture, lab validation and communication with engineers, security teams, executives and conference audiences.

Key responsibilities

• Design and publish security reference architectures for single-tenant private AI clouds, multi-tenant GPU clouds and hybrid deployments, mapping designs to customer controls and documenting trade-offs.
• Define a defence-in-depth model from hardware root of trust and firmware through hosts, virtual machines, Kubernetes, networks, storage, models and applications, and map tenant isolation boundaries.
• Cover bare-metal and host security (secure boot, TPM attestation, BMC and Redfish hardening), VM security (hypervisor and KubeVirt hardening, VM isolation, PCI passthrough and SR-IOV), Kubernetes security (RBAC, Pod Security Standards, admission control, policy-as-code, runtime security), secrets management, PKI, network and storage security, and public cloud landing zones.
• Secure AI model and application lifecycles, including model provenance, inference service protection against prompt injection and exfiltration, GPU isolation (MIG, vGPU, passthrough) and confidential computing options, and software supply chain security (image signing, SBOMs, vulnerability management).
• Research emerging threats and technologies, prototype designs in the lab, and present findings internally and externally.
• Build and run proofs of concept with customers and partners, write automation and tooling (Python, Go, Ansible, Terraform, Kubernetes manifests), and act as security subject matter expert in customer discovery and design reviews.

Required profile

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity or a related field, or equivalent practical experience.
• 8+ years in security engineering or security architecture, with at least 3 years securing cloud, Kubernetes or large-scale infrastructure platforms.
• Customer-facing experience as a solutions architect, pre-sales engineer, consultant or technical lead.
• Curious, ownership-driven, proactive, fast learner, business-minded, and able to communicate clearly in excellent written and spoken English.

Required skills

• Cloud security on a major public cloud (AWS, Azure or GCP) and private or bare-metal infrastructure.
• Linux hardening, secure boot, TPM, hypervisor and VM isolation, including KubeVirt.
• Kubernetes security (RBAC, Pod Security Standards, admission control, Kyverno, OPA Gatekeeper, Falco).
• Secrets management (Vault or OpenBao, External Secrets Operator) and PKI (cert-manager, mTLS, OIDC, SPIFFE/SPIRE).
• Zero-trust, Kubernetes network policy (Cilium, Calico), encryption at rest and in transit.
• AI security basics (OWASP Top 10 for LLM Applications, MITRE ATLAS) and software supply chain security (Sigstore/cosign, SBOMs, SLSA).
• Scripting in Python or Go, Git, CI and infrastructure-as-code.

Nice to have: compliance framework experience (FedRAMP, SOC 2, ISO/IEC 27001, CIS benchmarks), confidential computing and remote attestation, GPU cloud or NVIDIA Cloud Partner experience, offensive security experience, Mirantis product knowledge, and certifications such as CISSP, CCSP, CKS or OSCP.