{"id":3226652,"url":"https://alion.io/job/entrust-platform-architect-agentic-trust-2","title":"Platform Architect - Agentic Trust","company":{"id":4788,"name":"Entrust","domain":"entrust.com","url":"https://alion.io/company/entrust","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":9,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-10-26T05:57:25Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":139000,"max_usd":270000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":22},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"EU AI Act","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"SOC 2","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"AWS Bedrock AgentCore","optional":true},{"name":"LLM","optional":true},{"name":"Okta","optional":true},{"name":"Sigstore","optional":true}],"status":"live","first_seen_at":"2026-10-23T00:00:00Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T10:51:02Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Join us at Entrust\nAt Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.\nEntrust's values are a cornerstone of who we are, our future business growth and how our people grow through it. We model our values by demonstrating that Customer Trust Is Earned, moving with purpose because Speed Is Intentional, taking accountability because We Own the Outcome, and building a collaborative culture where One Entrust Wins Together.\nGet to Know Us\nHeadquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.\nPlatform Architect, Entrust Agentic Trust\nPosition Summary\nThe Platform Architect, is accountable for maintaining architectural coherence across the Entrust Agentic Trust Layer and every Line of Business capability that supplies into it, ensuring independent teams and product lines operate within a common architecture and governance framework.\nEntrust’s operating doctrine for the Agentic Trust Layer is to complement the enterprise agentic control plane with trusted identity, security, evidence, and assurance capabilities. Our strategy is to architect a solution that brings together decades of Entrust expertise across both product and non-product domains, while actively shaping current and emerging industry standards to ensure they are fit for purpose for the agentic enterprise. By establishing a trusted foundation for AI-driven decision making and automation, Entrust enables organizations to realize the productivity, innovation, and growth benefits of AI with confidence, accountability, and governance.\nThis role is accountable for defining and governing the four-plane reference architecture, Identity, Authority, Execution, and Assurance, as well as the composition model, trust-plane architecture, and dependency contracts that enable multiple product teams to operate as a unified, integrated trust layer. The mandate is to ensure cryptographic assurance, interoperability, scalability, and business agility across the platform while maintaining a cohesive architecture and operating model. The role also serves as a key industry representative, partnering with standards bodies and ecosystem stakeholders to help shape emerging standards for the agentic enterprise, with particular emphasis on agentic trust, digital identity,\nThis role partners closely with executive leadership, product teams, engineering, security, and business stakeholders to ensure technology investments deliver measurable business value while maintaining scalability, security, and operational excellence. The Platform Architect is a named gate on every Entrust Agentic Trust Layer build track\nKey Responsibilities\nTrust-Layer Architecture Leadership\nDefine and maintain the architecture strategy and roadmap for the four planes, and hold the reference architecture as the single normative source across product lines.\nEstablish architectural principles, standards, patterns, and governance processes, including the Boundary Review process that arbitrates scope conflicts between Entrust Agentic Trust Layer and the Lines of Business.\nOwn the Line of Business dependency contracts: interface definitions, service levels, versioning commitments, and internal transfer-pricing terms for each supplying primitive.\nEnsure technology investments align with business objectives and strategic priorities.\nServe as design authority and technical gate on all Entrust Agentic Trust Layer build tracks, and as the arbiter of record when product, engineering, and Line of Business positions conflict.\nAgent Identity, Authority, & Evidence Architecture\nOwn the technical specification of the Agent Passport, including SPIFFE/SPIRE-based workload identity, SVID issuance and rotation, attestation of the issuing workload, and binding to Entrust CA roots and HSM-protected keys.\nOwn the Permission Slip framework: HSM signing, the five binding elements, delegation chain semantics, revocation and expiry, and the Permission Slip Exchange for presentation across organizational boundaries. The term is always used in full and never shortened in specification or customer-facing material.\nOwn the Evidence Ledger and Replay architecture: append-only, tamper-evident, independently verifiable records of authorization and action, with a replay capability that reconstructs an agent episode for an auditor without relying on the agent's own account of it.\nOwn the Policy Engine, MCP Gateway, and Just-in-Time Authorization architecture across the Authority and Execution planes, including inline latency budgets, degradation modes, and explicit fail-open versus fail-closed policy per control point.\nOwn the Continuous Authentication Engine architecture, including signal ingestion, session-risk evaluation, and the re-authorization path when confidence in a human principal or an agent's context degrades mid-session.\nOwn Content Provenance architecture, including C2PA-aligned signing and verification of agent-generated artifacts, and its relationship to CSP Signing Services.\nEstablish frameworks for responsible AI, model governance, explainability, and ethical use, and anchor them in the Assurance plane so that governance claims are evidenced rather than asserted.\nPartner with business leaders to identify and prioritize high-value agentic use cases.\nEnsure Entrust Agentic Trust Layer solutions are secure, compliant, scalable, and aligned with industry regulations and third-party assurance regimes.\nTechnology Innovation\nChampion innovation through the evaluation and adoption of emerging technologies, with priority on agent identity, delegated authorization, verifiable data structures, confidential computing, and post-quantum readiness for long-lived evidence.\nDevelop technology roadmaps supporting the agentic trust layer and competitive advantage.\nGuide investment decisions related to cloud platforms, cryptographic infrastructure, agent runtimes, and hyperscaler attach surfaces.\nEvaluate build-versus-buy decisions for Entrust Agentic Trust Layer capabilities, and serve as technical diligence lead on acquisition targets in agent authorization, secrets and non-human identity, and continuous authentication.\nGovernance, Risk & Security\nPartner with cybersecurity teams to ensure architecture aligns with security and compliance requirements.\nChair the Architecture Review Board and the Boundary Review forum, escalating unresolved scope conflicts to the Chief Operating Officer for arbitration.\nEnsure Entrust Agentic Trust Layer solutions comply with privacy, legal, regulatory, and ethical standards, including EU AI Act Article 50 transparency obligations, DORA operational resilience expectations, eIDAS and qualified trust service requirements, and FIPS 140-3 and Common Criteria assurance levels where in scope.\nManage technology risks and provide recommendations to executive leadership, including a standing view of where the architecture is designed versus generally available.\nLeadership & Collaboration\nServe as a trusted advisor to executive leadership on technology strategy and emerging trends.\nInfluence senior stakeholders across business and technology teams.\nLead, mentor, and develop architects and senior technology professionals.\nFoster a culture of innovation, collaboration, continuous learning, and operational excellence.\nRepresent Entrust in the standards and governance bodies that will define agentic trust, including the x402 Foundation, FIDO Alliance and AP2, OpenID Foundation, IETF working groups, and the Cloud Security Alliance, and convert standards positions into product architecture.\nServe as the senior technical voice in analyst engagements, design-partner architecture sessions, and strategic customer reviews with regulated enterprises.\nRequired Qualifications\nBachelor's degree in Computer Science, Information Technology, Engineering, or a related field.\n15+ years of progressive technology leadership experience.\n7+ years leading enterprise architecture programs or platform and security architecture for identity, cryptography, or trust infrastructure products and large-scale technology transformations.\nDeep, applied expertise in cryptography and public key infrastructure: certificate authorities, key lifecycle and custody, hardware security modules, signing services, and hardware roots of trust.\nWorking expertise in workload identity (SPIFFE/SPIRE, SVIDs, mutual TLS) and modern delegated authorization (OAuth 2.x, token exchange, externalized policy, PBAC and ABAC).\nDemonstrated experience designing tamper-evident or append-only verifiable systems: Merkle-backed logs, Certificate Transparency, transparency log constructs, or equivalent.\nDeep expertise in cloud platforms (Azure, AWS, or Google Cloud), including confidential computing and external or customer-managed key management.\nExperience shipping products under third-party assurance regimes (FIPS 140-3, Common Criteria, eIDAS, SOC 2, FedRAMP), where certification evidence is an engineering deliverable rather than a compliance afterthought.\nProven ability to influence executive stakeholders and drive strategic decisions.\nExperience leading cross-functional teams in complex global organizations.\nPreferred Qualifications\nMaster's degree in Computer Science, Engineering, Data Science, Business, or related field.\nExperience deploying Generative AI and Large Language Model (LLM) solutions at enterprise scale, and securing them in production.\nKnowledge of agentic AI architectures, AI orchestration frameworks, the Model Context Protocol (MCP), agent-to-agent interoperability, and agentic payment and delegated-mandate rails including x402 and AP2.\nFamiliarity with the competitive control-plane landscape, including Microsoft Entra Agent ID and Agent 365, Google's SPIFFE-based agent identity work, AWS Bedrock AgentCore, and Okta cross-app access, and the ability to articulate where Entrust attaches rather than competes.\nAI, cloud, cybersecurity, or enterprise architecture certifications.\nExperience in highly regulated industries, particularly financial services and insurance, where agentic delegation carries direct fiduciary and supervisory consequences.\nContribution or maintainer standing in open trust-infrastructure communities such as SPIFFE/SPIRE, Sigstore, or Certificate Transpare\nAt Entrust, we don’tjust offer jobs - we offer career journeys. Here is what you can expect when you join our team:\nCareer Growth: Whether you’rea budding developer or a seasoned expert, we’reinvested in your professional journey. With learning-forwardinitiatives and exciting challenges, your growth is our priority.\n\nFlexibility: Life is all about balance. Whether you’reremote, hybrid, or on-site, we offer flexible options that fit your lifestyle.\n\nCollaboration: Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.\n\nWe believe in securing identities-but it doesn’tstop there. At Entrust, we’repassionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious biastraining for our leaders to global affinity groups that connect colleagues across the globe, we’recreating a community where everyone is encouraged to be themselves.\nReady to Make an Impact?\nIf you’reexcited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let’sbuild a more secure world-together.\nApply today!\nFor more information, visit www.entrust.com. Follow us on, LinkedIn, Facebook, Instagram, and YouTube\nFor US...","description_format":"text","description_chars":12525,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Digital Signature"],"lifecycle":[{"event":"open","at":"2026-10-25T06:01:25Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":45,"reasons":["conf:19","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/entrust-platform-architect-agentic-trust-2","json_url":"https://alion.io/job/entrust-platform-architect-agentic-trust-2.json","meta":{"generated_at":"2026-10-26T21:46:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29373,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4788},"rest":"https://alion.io/mcp/rest/get_company?id=4788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fentrust-platform-architect-agentic-trust-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fentrust-platform-architect-agentic-trust-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fentrust-platform-architect-agentic-trust-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/entrust-platform-architect-agentic-trust-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fentrust-platform-architect-agentic-trust-2"}]}