Distinguished Engineer End to End Security Architect
Graphcore is a SoftBank-owned AI-compute company developing AI processors, systems, and software for machine-learning workloads.
Funding history
About Graphcore
Graphcore develops Intelligence Processing Units (IPUs) and the Poplar SDK for building and running machine-learning applications. It continues operating under the Graphcore name as a wholly owned SoftBank Group subsidiary.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will define and lead security architecture across platform infrastructure, networking, APIs, operations, customer assurance, and compliance. You will establish security requirements and controls, assess risk, support reviews and audits, and provide architectural leadership across engineering and operational functions.
Requirements
- Advanced degree in a technical discipline or equivalent practical experience
- Experience in security architecture, platform security, cloud security, infrastructure security, or large-scale service security
- Experience owning security architecture for customer-facing platforms or production environments
- Knowledge of threat modelling, zero-trust principles, tenant isolation, privileged access management, cryptographic controls, and secure operations
- Knowledge of secure boot, attestation, firmware integrity, and supply-chain security
- Experience with network security architecture, segmentation, monitoring, and access control
- Experience with key management, secrets management, certificate lifecycle management, and encryption
- Experience securing APIs, deployment pipelines, service control planes, and operational tooling
- Understanding of logging, monitoring, incident response, security operations, and evidence management
- Experience supporting security reviews, audits, penetration testing, and security discussions
Responsibilities
- Own end-to-end security architecture for the inference service platform
- Define security principles, threat models, trust boundaries, tenant-isolation requirements, and architectural standards
- Establish security requirements for deployment environments and platform components
- Lead the design of network and service isolation controls, secure communications, segmentation, and administrative access protections
- Own architecture for authentication, authorisation, secrets management, encryption, key management, and data protection
- Define privileged-access, audit, access-review, and emergency-access approaches
- Establish logging, monitoring, telemetry, incident-response, and assurance requirements
- Ensure security requirements are implemented, maintained, and validated
- Assess security posture and manage risk-based decisions
- Support customer security reviews, audits, penetration testing, questionnaires, and assurance discussions
- Provide technical leadership, mentoring, and design-review expertise
Benefits
- Medical coverage
- Dental coverage
- Vision coverage
- Flexible Spending Accounts
- Health Savings Accounts
- Disability insurance
- Life insurance
- 401(k) retirement plan
- Commuter benefits
- Wellness services
- Employee Assistance Programme
- Flexible working arrangements