Director of Platform and Infrastructure Security

📋 Job Overview

About the Role

We've established a hardened security baseline and are now scaling it into a mature, enterprise-grade security estate. Reporting directly to the CISO and partnering with leads across Engineering, Platform, and the business, you'll be the technical linchpin who designs the architecture and writes the code that makes it real.

This is a hybrid architect-builder role. You'll move between high-level design sessions on our next-gen GPU fabric and the editor where you ship the Go, Python, or Rust that secures our APIs, orchestration plane, and firmware stack. If you believe the best way to prove an architecture is to build it, this is your seat.

🏢 About TensorWave

About TensorWave

Our mission is simple: deliver seamless, secure, reliable, and resilient AI compute at scale. We've built a versatile cloud platform that eliminates infrastructure barriers, empowering builders to focus on innovation instead of fighting their stack. Because breakthrough AI should move at the speed of ideas, not infrastructure.

🎯 The Role

What You’ll Do

Architect and build security across the stack. Partner with Core Architecture and DevOps on threat modeling, design reviews, and the automated guardrails that let engineering move fast without breaking the security promise.

Harden the fabric, cradle to grave. Own hardware lifecycle security across our AMD Instinct clusters and high-speed fabrics (InfiniBand / RoCE). Build the code behind TPM 2.0 / Secure Boot, cryptographic attestation, and programmable trust.

Lead our open firmware security commitment. Keep our OpenBMC, coreboot, and ROCm ecosystems continuously secure, auditable, and open. Design and implement the tooling that makes hardware management transparent by default.

Engineer Zero-Trust IAM. Design and implement least-privilege automation across the management plane, with identity-based micro-segmentation wired into our orchestration engines.

Make compliance push-button. Act as the CISO's right hand scaling SOC2 and ISO 27001. Replace manual evidence collection with continuous monitoring and \"always-on\" controls.

Operate as a purple teamer. Think like an attacker, then ship the telemetry, detections, and hardening to close what you found.

Evangelize Security-as-Code. Version-controlled policy, shift-left integration, self-healing infrastructure. Manual configuration is a vulnerability we don't accept.

✅ Key Responsibilities

• Architect and build security across the stack, partnering with Core Architecture and DevOps on threat modeling, design reviews, and automated guardrails.
• Own hardware lifecycle security across AMD Instinct clusters and high-speed fabrics (InfiniBand / RoCE), building code for TPM 2.0 / Secure Boot, cryptographic attestation, and programmable trust.
• Lead open firmware security for OpenBMC, coreboot, and ROCm ecosystems, designing and implementing tooling for transparent hardware management.
• Design and implement Zero-Trust IAM with least-privilege automation and identity-based micro-segmentation in orchestration engines.
• Scale SOC2 and ISO 27001 compliance, replacing manual evidence collection with continuous monitoring and \"always-on\" controls.
• Operate as a purple teamer, identifying vulnerabilities and implementing telemetry, detections, and hardening.
• Evangelize Security-as-Code, implementing version-controlled policy, shift-left integration, and self-healing infrastructure.

📌 Required Qualifications

• Deep experience securing High-Performance Computing or large GPU environments, including Linux internals and high-speed fabric isolation (InfiniBand / RoCE).
• Strong coding chops in Go, Python, or Rust, building functions that run themselves rather than dashboards that need to be watched.
• Hands-on with Infrastructure-as-Code (Terraform, Pulumi, Ansible) and Kubernetes at production scale.
• Working knowledge of hardware roots of trust: TPM 2.0, Secure Boot, measured boot, attestation.
• Proven track record building Zero-Trust architectures and driving SOC2 / ISO 27001 programs toward automation.
• Background in a fast-scaling startup or high-end security consultancy where you built things from scratch and then wrote the code to keep them secure.
• Architect-builder mindset: equally comfortable in a whiteboard session and a pull request review.

⭐ Desirable Experience

• Familiarity with open firmware stacks (OpenBMC, coreboot) and the AMD / ROCm ecosystem.

🎁 Benefits

What We Offer

Stock Options
100% paid Medical, Dental, and Vision insurance for Employees
Company Health Savings Account Contributions
100% paid Short Term and Long Term Disability Insurance for Employees
Life and Voluntary Supplemental Insurance Options
Other Insurance Options, such as Pet & Legal Insurance
Various Supplementary Health Benefits, such as discounted Virtual Healthcare Appointments and Serious Illness Support
Flexible Spending Account
401(k)
Employee Assistance Program
Flexible PTO
Paid Holidays
Parental Leave
Other In-Office Perks

🛂 Visa & Eligibility

Employment Eligibility

All offers of employment are contingent upon verification of identity and authorization to work in United States, as required by law.