> Markdown version of [/jobs/ext/3844033-principal-security-architect](https://www.wearedevelopers.com/jobs/ext/3844033-principal-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Architect

- **Company:** Graphcore Limited
- **Location:** Sacramento, CA, United States
- **Experience:** Expert
- **Contract:** Temporary to permanent
- **Skills:** Amazon Web Services, User Authentication, Microsoft Azure, Configuration Management, Cyber Security, Computer Engineering, Continuous Integration, Linux, Disaster Recovery, Hardware Security Module, Identity and Access Management, Key Management, Lightweight Directory Access Protocols (LDAP), OpenID, Public Key Infrastructure, Zero Trust Network Access, Software Engineering, Systems Integration, Google Cloud, Information Technology, U-Boot, Software Coding, Terraform
- **Published:** October 20, 2026
- **Apply:** https://www.juju.com/job/23_321327DA68DEAF3D63A74A87F18FAB3E

## About the Role

REQUIREMENTS Education: MS or Ph.D. in Computer Science, Computer Engineering, Cryptography, Cybersecurity, or a related highly technical field.
Experience: 10+ years of deep technical experience and proven experience in Public Key Infrastructure, Hardware Security Modules deployment and management.
Strong knowledge of encryption technologies, security controls, and compliance frameworks.
Strong understanding of authentication backends (OIDC, LDAP, cloud IAM), secret engines, PKI, encryption, and token/credential lifecycle.
Familiarity with infrastructure maintenance, disaster recovery planning, and capacity management.
Skilled in coding standards, secure software development lifecycle, and configuration management processes.
Familiarity with Infrastructure-as-Code (Terraform preferred) and CI/CD automation.
Leadership & Communication: Exceptional ability to distill complex, theoretical security concepts into strict engineering specifications, and the gravitas to influence engineering teams and executive leadership without direct authority.
DIFFERENTIATORS Experience integrating Vault with cloud platforms (AWS, Azure, GCP) and CI/CD pipelines.
Standards Body Contributions: Active participation, authorship, or contribution to industry security standards (e.g., TCG, OCP Security Project, Linux Foundation, or Arm security working groups).
Knowledge of SPIFFE/SPIRE, workload identity, or zero-trust architectures.
Post-Quantum Readiness: Forward-looking understanding of Post-Quantum Cryptography (PQC) and its upcoming impact on hardware lifecycle and secure boot.
Understanding of Platform Root of Trust, Platform Identity, DICE and attestation.

## Description

About the Role We are seeking a Principal Security Architect to design, maintain and secure scalable infrastructure solutions for cryptographic key management.
In this strategic role, you will be responsible for evaluating, deploying and manage Hardware Secure Modules from the ground up, ensuring compliance with standards across different regions.
You will also enable multiple teams by supporting them for control and automation.
You will be expected to drive and implement policies for key and certificate creation, rotation, and revocation.
Collaboration with stakeholders to analyze requirements and implement robust access controls is essential while demonstrating operational excellence.
RESPONSIBILITIES Design and deploy scalable, secure infrastructure solutions from scratch, aligned with business requirements and security standards.
Hardware Secure Module ownership and governance.
Develop organizational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform.
Conduct risk and compliance assessments to support system security plans and disaster recovery strategies.
Collaborate on requirement analysis, user and key story operations, and capacity planning to ensure optimal resource utilization.
Advocate for best practices in secret lifecycle management, authentication methods, and identity federation.
Create tooling, automation, onboarding guides, and libraries to help teams access the platform easily and correctly.