10 months ago
USA (city not specified)Senior / Staff+
Responsibilities
- Own the end-to-end security architecture for multi-tenant Kubernetes GPU clusters.
- Design tenant isolation, egress control, and network segmentation across compute, storage, and networking layers.
- Define and implement runtime security and intrusion detection for untrusted AI workloads.
- Build identity, secrets, encryption, and policy-enforcement security primitives for platform teams.
- Secure the software supply chain from CI/CD pipelines through container admission.
- Lead threat modeling and security design reviews for platform features.
- Drive SOC 2 and ISO 27001 compliance readiness.
- Set security standards, unblock engineering teams, and raise the organization’s security bar.
- Lead security incident response and convert incidents into systemic improvements.
Requirements
- 7+ years of experience in security engineering for cloud-native, infrastructure, or distributed systems.
- Deep hands-on expertise in Kubernetes security, including RBAC, PSA, network policies, and admission controllers.
- Strong understanding of cloud security primitives in AWS, GCP, or Azure.
- Experience with runtime security and policy enforcement using tools such as Falco, Cilium, OPA, Calico, or eBPF-based tools.
- Strong grounding in network security and zero-trust architectures.
- Practical experience with secrets management and key systems such as Vault and cloud KMS.
- Strong automation skills in Go, Python, or Bash.
- Ability to operate autonomously, make architectural decisions, and deliver in ambiguous environments.
- Experience partnering with platform, infrastructure, and SRE teams.
- Preferred experience includes GPU isolation and virtualization security, InfiniBand, RDMA, high-performance networking, HPC, multi-tenant compute platforms, AI/ML security, incident response leadership, red teaming, security certifications such as CKS, OSCP, or CISSP, and open-source security or cloud-infrastructure contributions.
Benefits
- Competitive salary commensurate with experience and aligned with industry standards.
- Meaningful equity aligned with the role and the experience brought to the company.
Tech Stack
Categories
About Zettabyte
Zettabyte builds Zetta-ERP, a SaaS and white‑label platform for private universities that manages the student and academic lifecycle end to end. It also develops software to deploy, manage, and optimize large‑scale GPU clusters for enterprises and governments, working with hardware supply-chain partners like Foxconn, Wistron, and Pegatron. Founded in 2016 and headquartered in Singapore, the company is privately held and serves higher‑education institutions globally.