1 day ago
London, United KingdomStaff+
Responsibilities
- Define and maintain the Agentic Trust Layer architecture strategy, roadmap, reference architecture, principles, standards, and governance processes.
- Own dependency contracts and serve as design authority and technical gate across Agentic Trust Layer build tracks.
- Architect Agent Passport, SPIFFE/SPIRE workload identity, SVID issuance and rotation, attestation, CA integration, and HSM-protected keys.
- Own the Permission Slip delegated-authorization framework, Evidence Ledger and Replay architecture, Policy Engine, MCP Gateway, continuous authentication, and content provenance architecture.
- Establish responsible AI, model governance, explainability, ethical-use, compliance, and assurance frameworks.
- Evaluate emerging technologies, cloud and cryptographic infrastructure, agent runtimes, build-versus-buy decisions, and acquisition targets.
- Chair the Architecture Review Board and Boundary Review forum and advise executive leadership on technology risks and strategic decisions.
- Lead, mentor, and develop architects and senior technology professionals across complex global teams.
- Represent Entrust in standards and governance bodies and serve as a senior technical voice in analyst, customer, and design-partner engagements.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
- 15+ years of progressive technology leadership experience.
- 7+ years leading enterprise architecture programs or platform and security architecture for identity, cryptography, trust infrastructure products, or large-scale technology transformations.
- Deep applied expertise in cryptography and PKI, including certificate authorities, key lifecycle and custody, hardware security modules, signing services, and hardware roots of trust.
- Working expertise in SPIFFE/SPIRE, SVIDs, mutual TLS, OAuth 2.x, token exchange, externalized policy, PBAC, and ABAC.
- Experience designing tamper-evident or append-only verifiable systems such as Merkle-backed logs or Certificate Transparency.
- Deep expertise with Azure, AWS, or Google Cloud, including confidential computing and external or customer-managed key management.
- Experience shipping products under FIPS 140-3, Common Criteria, eIDAS, SOC 2, or FedRAMP assurance regimes.
- Proven ability to influence executives, drive strategic decisions, and lead cross-functional teams in complex global organizations.
- Preferred: master’s degree in Computer Science, Engineering, Data Science, Business, or a related field.
- Preferred: experience deploying and securing Generative AI and LLM solutions at enterprise scale, plus knowledge of agentic AI architectures, MCP, agent interoperability, x402, and AP2.
- Preferred: familiarity with Microsoft Entra Agent ID, Agent 365, Google’s SPIFFE-based agent identity work, AWS Bedrock AgentCore, and Okta cross-app access.
- Preferred: AI, cloud, cybersecurity, or enterprise architecture certifications; regulated-industry experience; or contributions to SPIFFE/SPIRE, Sigstore, or Certificate Transparency communities.
Benefits
- Flexible remote, hybrid, or on-site work options.
- Career growth, learning-forward initiatives, and challenging professional opportunities.
- Collaborative, inclusive workplace with diversity initiatives, unconscious-bias training, and global affinity groups.
About Entrust
Entrust builds identity-centric security software and hardware for enterprises, governments, and financial institutions, including PKI and certificate management, SSL/TLS, MFA, HSMs, and digital identity verification. It also supplies systems that issue payment cards, passports, and secure ID credentials. The privately held company is headquartered in Minneapolis, Minnesota, and serves customers in more than 150 countries.