Staff Security Engineer at DDN

Department: Department

Setup: Hybrid
Location: Santa Ana, California
Type: Full-time
Level: staff+
Posted: Jul 31, 2026

Description

DDN is seeking a Sr. Staff Security Architect to lead end-to-end security architecture for distributed storage platforms, including S3-compatible systems, POSIX-compliant file systems, and KV cache–based data services. The role partners with data-path, control-plane, protocol, and ecosystem engineering teams to embed security across encryption, identity and access management, authorization, multi-tenant isolation, secure APIs, observability, and compliance. The position requires a bachelor’s or master’s degree in a relevant field and at least 12 years of experience in security architecture, infrastructure security, or distributed systems, along with expertise in cryptography, IAM, secure API design, and large-scale distributed systems.

Required Skills

Distributed systems security
Cryptography
Identity and access management
RBAC and ABAC
TLS 1.3
Key management
Multi-tenant isolation
SIEM integration

Additional Information

Minimum Education: Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field
Required Previous Experiences: 12+ years of experience in security architecture, infrastructure security, or distributed systems
Experience designing security for large-scale distributed systems or storage platforms
Experience integrating with external KMS solutions using KMIP or similar protocols
Experience working with enterprise identity providers such as LDAP, Active Directory, and OIDC
Experience designing multi-tenant systems with strong isolation and policy enforcement
Preferred Qualifications: Experience working with S3, POSIX/NFS, or similar storage protocols from a security architecture perspective
Familiarity with KV cache systems, memory tiering, or AI/ML data infrastructure security considerations
Hands-on experience with BYOK models and tenant-scoped key management
Experience implementing ABAC using metadata, tags, and classification attributes
Background in zero trust architecture and distributed system security design
Experience with secure deletion techniques, including cryptographic erasure
Knowledge of compliance frameworks such as SOC 2, ISO 27001, NIST, or FedRAMP
Experience designing security for high-performance, low-latency distributed systems
Familiarity with anomaly detection, security analytics, and alerting systems
Translation Company Name: DDN