Staff Security Architect
Bellevue · San Jose Office (First St) · San Francisco Office (Fremont St) · 5+ years experience · Full-time · Hybrid · Posted Oct 8, 2026
At a glance
- Experience
- 5+ years experience
- Employment
- Full-time
- Workplace
- Hybrid
- Location
- Bellevue · San Jose Office (First St) · San Francisco Office (Fremont St)
About Lambda
- - Founded in 2012, with 500+ employees, and growing fast
- - Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove
- - We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG
- - Our values are publicly available: https://lambda.ai/careers
- - We offer generous cash & equity compensation
- - Health, dental, and vision coverage for you and your dependents
About the role
- Lambda Security protects valuable digital assets, including training data, model weights, and sensitive inputs required for AI models.
- Reporting to the CISO, the Staff Security Architect shapes overall security architecture with a primary focus on Data Protection and Platform Security.
Responsibilities
- Architect, design, and standardize end-to-end data protection strategy, encompassing data classification, cryptographic key management (KMS/HSM), data loss prevention (DLP), and privacy-preserving controls across customer data and AI model weights.
- Define data lifecycle security controls for training datasets, checkpoint storage, and model artifacts across cloud and on-premises storage layers.
- Drive confidential computing architectures, envelope encryption, and hardware-backed data security guarantees for high-consequence customer workloads.
- Establish robust zero-trust data access policies and fine-grained authorization frameworks for sensitive platform APIs and data repositories.
- Design and enforce core platform security architectures across multi-tenant GPU infrastructure, bare-metal clusters, hypervisors, and container orchestration platforms (Kubernetes).
- Define strong tenant isolation, sandboxing, and secure virtualization controls to protect against cross-tenant side-channel and platform escape vulnerabilities.
- Conduct comprehensive threat models, architectural reviews, and risk assessments for core platform services and platform control planes.
- Prototype reference implementations and security controls in Python or Go to demonstrate secure platform integration patterns.
- Pioneer AI-powered architectural security capabilities leveraging Lambda's hosted LLMs for automated threat modeling, automated policy validation, and data discovery.
- Partner closely with Platform, Engineering, Product, and Infrastructure leaders to embed security architecture into long-term product roadmaps.
Requirements
- 10+ years of total engineering experience with 5+ years specializing in security architecture, platform security, or data protection at cloud/infrastructure scale
- Deep expertise in data security concepts including encryption key management (KMS/HSM), cryptographic protocols, DLP, and confidential computing primitives
- Proven track record of designing multi-tenant platform security architecture across heterogeneous infrastructure (bare-metal GPU clusters, hypervisors, KVM, Kubernetes, and public cloud)
- Strong technical skills in prototyping security designs and reference code in Python, Go, or similar languages
- Demonstrated experience with threat modeling methodologies (STRIDE, PASTA, etc.) and security design reviews for high-consequence systems
- Strong communication and stakeholder management skills, with a track record of partnering effectively with IT, Legal, and HR
- Ability to balance robust enterprise security controls with employee experience and productivity
- Thrives in fast-moving, high-growth startup environments where building scalable structure is required
Preferred qualifications
- Excitement about leveraging our direct access to state-of-the-art LLMs to revolutionize enterprise security—imagine AI-assisted access reviews, automated SaaS risk assessments, and intelligent policy generation.
- Experience building enterprise security and IAM programs at high-growth tech companies or cloud providers
- Familiarity with compliance frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA) and audit preparation
- Experience implementing Infrastructure as Code (Terraform) for managing enterprise identity and SaaS configurations
- Deep technical background allowing hands-on contribution when needed
- Experience with both build and buy decisions for security tooling
- Experience driving or providing significant evidence for compliance audits, such as SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, or FedRAMP.
Benefits
- Generous cash & equity compensation
- Health, dental, and vision coverage for you and your dependents
- Wellness and commuter stipends for select roles
- 401k Plan with 2% company match (USA employees)
- Flexible paid time off plan
Workplace
- Position requires presence in the Bellevue, San Francisco, or San Jose office location 4 days per week.
- Lambda’s designated work from home day is currently Tuesday.
Skills
- Python
- Go
- Kubernetes
- Terraform
- KVM
- HSM
- KMS
