Distinguished Engineer, End-to-End Security Architect

Graphcore•Milpitas, CA

12d

About The Position

Graphcore is a leading innovator in Artificial Intelligence compute, developing hardware, software, and systems infrastructure to drive AI breakthroughs and adoption across industries. As part of the SoftBank Group, Graphcore is committed to enabling Artificial Super Intelligence and making its benefits accessible to everyone. The company fosters continuous learning and innovation with teams drawn from diverse backgrounds, including AI research specialists, silicon designers, software engineers, and systems architects. The Distinguished Engineer, End-to-End Security Architect will report into the Systems Engineering organization. This role is pivotal in defining and leading the security architecture for Graphcore’s inference service platform. The primary responsibility is to establish a comprehensive security strategy that encompasses platform, infrastructure, networking, service operations, customer assurance, and compliance readiness. This position requires close collaboration across multiple engineering and operational functions to provide technical leadership, drive security requirements, and ensure the platform offers robust protection, resilience, and trust for customers.

Requirements

Advanced degree in Computer Science, Computer Engineering, Cybersecurity, Electrical Engineering, or a related technical discipline, or equivalent practical experience.
Significant experience in security architecture, platform security, cloud security, infrastructure security, or large-scale service security.
Demonstrated experience defining and owning security architecture for customer-facing platforms, infrastructure services, or large-scale production environments.
Deep understanding of threat modelling, zero-trust principles, tenant isolation, privileged access management, cryptographic controls, and secure operations.
Strong knowledge of platform security technologies including trusted execution mechanisms, secure boot, attestation, firmware integrity, and supply-chain security concepts.
Experience defining security requirements for data centre deployments, operational environments, and physical security controls.
Expertise in network security architecture, segmentation, management-plane protection, secure communications, monitoring, and access control.
Experience with key management, secrets management, certificate lifecycle management, and encryption technologies.
Experience securing APIs, deployment pipelines, service control planes, and operational tooling.
Strong understanding of logging, monitoring, incident response, security operations, and evidence management practices.
Experience supporting customer security reviews, audits, penetration testing activities, and executive-level security discussions.
Excellent communication and stakeholder management skills, with the ability to influence technical and non-technical audiences.
Proven ability to lead through influence across engineering, security, operations, compliance, and customer-facing teams.

Nice To Haves

Experience securing AI/ML inference platforms, model-serving infrastructure, accelerator-based systems, or confidential AI workloads.
Experience with trusted execution environments, platform attestation technologies, secure firmware development, and workload identity solutions.
Experience with confidential computing, secure enclaves, measured boot technologies, and remote attestation.
Experience supporting highly regulated environments, critical infrastructure, or security-sensitive customer deployments.
Familiarity with industry security and compliance frameworks such as SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, FedRAMP, or NIST standards.
Knowledge of hardware platform security, high-performance networking, storage security, and accelerator ecosystem technologies.
Experience with supply-chain risk management, secure manufacturing practices, asset lifecycle controls, and secure disposal processes.
Understanding of emerging cryptographic technologies and future security trends.
Experience working with hyperscalers, enterprise customers, AI organisations, or managed infrastructure providers.

Responsibilities

Own the end-to-end security architecture for the inference service platform, covering infrastructure, networking, APIs, operational controls, monitoring, and customer assurance.
Define security principles, threat models, trust boundaries, tenant isolation requirements, and architectural standards for the service.
Establish security requirements for deployment environments, including physical security, operational controls, access management, and asset protection.
Define platform security requirements across hardware, firmware, secure boot, attestation, software integrity, and lifecycle management.
Lead the design of network and service isolation controls, secure communications, segmentation strategies, and administrative access protections.
Own security architecture for authentication, authorisation, secrets management, encryption, key management, and data protection controls.
Define privileged access management approaches, audit requirements, access review processes, and emergency access procedures.
Establish logging, monitoring, telemetry, incident response, and security assurance requirements across the service lifecycle.
Partner with engineering and operations teams to ensure security requirements are effectively implemented, maintained, and validated.
Assess security posture against customer, contractual, regulatory, and internal requirements, managing risk-based decisions where required.
Support customer security reviews, audits, penetration testing activities, security questionnaires, and technical assurance discussions.
Provide technical leadership, architectural guidance, mentoring, and design review expertise across multiple teams and disciplines.