{"id":606788,"url":"https://alion.io/job/ddn-staff-security-engineer","title":"Staff Security Engineer","company":{"id":672909,"name":"DDN","domain":"ddn.com","url":"https://alion.io/company/ddn","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":94,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0.429,"time_to_fill_p50_days":43,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sacramento, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":173000,"max_usd":345000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":414},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon S3","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"KV Cache","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Anomaly Detection","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-07-31T20:11:35Z","employer_posted_date":"2026-07-31","last_verified_at":"2026-10-23T21:12:56Z","board_verified":true,"closed_at":null,"days_open":84,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":84},"description":"DDN is seeking a highly experienced Sr. Staff Security Architect to lead the design and implementation of end-to-end security architecture across distributed storage platforms, including S3-compatible systems, POSIX-compliant file systems, and KV cache-based data services. This is an architecture role focused on working closely with engineering teams across the data path, control plane, and ecosystem/protocol domains to ensure security is deeply embedded across all layers of the platform. You will collaborate with protocol teams, storage engineers, and platform architects to define secure-by-design systems that support high-performance, multi-tenant, and AI-driven workloads. The ideal candidate brings deep expertise in distributed systems security, cryptography, identity frameworks, and storage architectures, with a strong ability to influence engineering design and guide implementation at scale.\nKey Responsibilities\nLead the design and implementation of end-to-end security architecture for distributed storage platforms, including S3-compatible systems, POSIX-compliant file systems, and KV cache-based data services.\n\nPartner closely with Data Path engineering teams to ensure secure, high-performance data movement across storage tiers, including encryption, integrity validation, and secure I/O handling.\n\nLead threat modeling, security reviews, and Secure Software Development Lifecycle (SSDLC) practices across the platform.\n\nDefine identity and access management (IAM) integrating enterprise identity providers such as LDAP, Active Directory, OIDC, and Keycloak, supporting SSO, MFA, and federation.\n\nArchitect fine-grained authorization models using RBAC and ABAC across tenants, datasets, and resources.\n\nDesign multi-tenant isolation mechanisms across namespaces, policies, encryption boundaries, and resource quotas, enforcing least privilege and segregation of duties.\n\nCollaborate with Control Plane teams to define secure APIs, authentication and authorization workflows, policy enforcement, and tenant lifecycle management.\n\nWork with Protocol and Ecosystem teams to secure S3 and POSIX/NFS interfaces, including request signing, session management, and endpoint security.\n\nDefine and enforce encryption strategies for data at rest and in transit, including tenant-specific keys and dataset-level encryption policies. .\n\nDrive observability and monitoring strategies to detect anomalous behavior, abnormal access patterns, and potential data exfiltration across the platform.\n\nProvide technical leadership and mentorship across cross-functional engineering teams, guiding secure design and implementation practices.\n\nRequired Qualifications\nBachelor’s or Master’s degree in Computer Science, Engineering, or a related field.\n\n12+ years of experience in security architecture, infrastructure security, or distributed systems.\n\nProven experience designing security for large-scale distributed systems or storage platforms.\n\nStrong understanding of data path vs. control plane architectures and their security implications.\n\nDeep expertise in encryption technologies, key management systems, and cryptographic frameworks.\n\nExperience integrating with external KMS solutions using KMIP or similar protocols.\n\nStrong knowledge of identity and access management (IAM), including RBAC, ABAC, SSO, MFA, and federation.\n\nExperience working with enterprise identity providers such as LDAP, Active Directory, and OIDC.\n\nFamiliarity with secure API design, TLS 1.3, mutual TLS, and request signing mechanisms (e.g., SigV4).\n\nExperience designing multi-tenant systems with strong isolation and policy enforcement.\n\nKnowledge of logging, auditing, and SIEM integration for security monitoring and compliance.\n\nAbility to collaborate effectively with protocol, storage, and platform engineering teams.\n\nPreferred Skills\nExperience working with S3, POSIX/NFS, or similar storage protocols from a security architecture perspective.\n\nFamiliarity with KV cache systems, memory tiering, or AI/ML data infrastructure security considerations.\n\nHands-on experience with BYOK models and tenant-scoped key management.\n\nExperience implementing ABAC using metadata, tags, and classification attributes.\n\nBackground in zero trust architecture and distributed system security design.\n\nExperience with secure deletion techniques, including cryptographic erasure.\n\nKnowledge of compliance frameworks such as SOC 2, ISO 27001, NIST, or FedRAMP.\n\nExperience designing security for high-performance, low-latency distributed systems.\n\nFamiliarity with anomaly detection, security analytics, and alerting systems.\n\nWhat You’ll Work On\nDefining and driving security architecture across data path, control plane, and protocol layers of distributed storage systems\n\nPartnering with engineering teams to embed security into S3, POSIX, and KV cache data services\n\nBuilding scalable encryption, identity, and access control frameworks for multi-tenant environments\n\nStrengthening tenant isolation, auditability, and compliance across the platform\n\nEnsuring secure integration across ecosystem components and external services\n\nLeading cross-team security initiatives that influence system design, implementation, and long-term platform evolution","description_format":"text","description_chars":5233,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Enterprise Storage Systems","Servers & Data Center Hardware"],"lifecycle":[{"event":"open","at":"2026-09-10T18:00:29Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.809,"p_room":0.36,"age_days":83,"expected_fill_days":43,"reasons":["conf:3","urgency","velocity","win:tail","crowd:"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/ddn-staff-security-engineer","json_url":"https://alion.io/job/ddn-staff-security-engineer.json","meta":{"generated_at":"2026-10-23T21:48:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4124,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":672909},"rest":"https://alion.io/mcp/rest/get_company?id=672909"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fddn-staff-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fddn-staff-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fddn-staff-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ddn-staff-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fddn-staff-security-engineer"}]}