Lead Engineer – Security Architecture

Principal-level security architect at DDN who sets long-term security architecture strategy for the company's next-generation distributed storage platforms: S3-compatible object storage, POSIX and NFS file systems, and KV cache data services for AI infrastructure. The role is based in Santa Clara.

The architect sets secure-by-design standards across the data path, control plane and protocol layers; leads threat modelling and secure development practice; designs IAM integrations, fine-grained RBAC and ABAC authorisation and multi-tenant isolation; and owns encryption and key management strategy, including BYOK, tenant-scoped keys and KMIP-based external KMS. Monitoring for insider threats and exfiltration, zero trust adoption and mentoring engineers are also part of it. DDN wants 12 or more years in security architecture or distributed systems security, with deep cryptography, PKI, IAM and secure API expertise.