• Coordinate cybersecurity and technology risk-management activities for the assigned product/area. • Oversee the implementation of the cybersecurity strategy. • Enable the adoption of global defenses and drive the implementation of minimum requirements, policies, controls, and reporting. • Responsible for procedures and controls to ensure compliance with applicable regulatory and legal requirements, as well as corporate best practices. • Assess and evaluate cybersecurity and technology risks (projects, third parties, systems, and information). • Automate area‑specific manual controls using AI‑based solutions.

• Assist with day-to-day cybersecurity operations for assigned information systems. • Support implementation of the NIST Risk Management Framework (RMF). • Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation. • Monitor security controls to ensure continued compliance with NIST SP 800-53. • Participate in continuous monitoring activities and vulnerability management. • Review security scan results from tools such as ACAS, Nessus, or Tenable and assist with remediation tracking. • Support annual security control assessments and Authority to Operate (ATO) activities. • Coordinate with system administrators, network engineers, and application owners to implement security controls. • Assist in security incident reporting, documentation, and corrective actions. • Maintain audit evidence supporting FISMA compliance. • Ensure user access reviews are completed and privileged accounts are monitored. • Participate in configuration management reviews and evaluate security impacts of system changes. • Assist with security awareness activities and policy compliance.

Role Description DDN is seeking a highly accomplished Principal Engineer – Security Architecture to define and drive the security strategy for next-generation distributed storage platforms spanning S3-compatible object storage, POSIX-compliant file systems, and KV cache–based data services. This role is responsible for architecting secure-by-design systems across the data path, control plane, and ecosystem/protocol layers that power high-performance, multi-tenant, AI-driven infrastructure at massive scale. As a senior technical leader, you will partner closely with storage architects, protocol engineers, platform teams, and security stakeholders to embed advanced security principles into every layer of the platform lifecycle. You will influence long-term architectural direction, establish foundational security standards, and guide implementation across globally distributed engineering organizations. The ideal candidate combines deep expertise in distributed systems security, cryptography, identity and access management, multi-tenant architectures, and infrastructure security with the ability to drive cross-functional technical strategy and execution. Key Responsibilities - Define and lead the long-term security architecture strategy for distributed storage platforms, including S3-compatible object storage, POSIX/NFS file systems, and KV cache–based data services. - Establish security architecture standards and secure-by-design principles across data path, control plane, orchestration, and protocol layers. - Partner with Data Path engineering teams to secure high-performance data movement across storage tiers, including encryption, integrity verification, secure I/O handling, and low-latency protection mechanisms. - Drive security architecture reviews, threat modeling, and Secure Software Development Lifecycle (SSDLC) practices across platform engineering initiatives. - Architect enterprise-grade Identity and Access Management (IAM) frameworks integrating LDAP, Active Directory, OIDC, Keycloak, SSO, MFA, federation, and delegated authorization models. - Design and govern fine-grained authorization systems leveraging RBAC, ABAC, metadata-aware policy enforcement, and tenant-scoped access controls. - Define scalable multi-tenant isolation architectures across namespaces, encryption boundaries, policies, quotas, and workload segregation domains while enforcing least privilege principles. - Collaborate with Control Plane engineering teams to design secure APIs, authentication workflows, policy orchestration, tenant lifecycle management, and platform governance controls. - Partner with Protocol and Ecosystem teams to secure S3, POSIX/NFS, and related interfaces, including request signing, session security, endpoint hardening, and protocol-level protections. - Lead platform-wide encryption and key management strategies for data at rest and in transit, including BYOK, tenant-scoped keys, dataset-level encryption policies, KMIP integration, and external KMS interoperability. - Define observability, telemetry, logging, auditing, and anomaly detection strategies to identify abnormal behavior, insider threats, and potential data exfiltration risks. - Drive adoption of Zero Trust security principles across distributed systems and infrastructure components. - Provide technical leadership, mentorship, and architectural guidance across cross-functional engineering teams, influencing secure implementation practices and platform evolution. - Represent security architecture initiatives in executive, customer, compliance, and strategic partner discussions as needed. Qualifications - Bachelor’s or Master’s degree in Computer Science, Engineering, Cybersecurity, or a related technical field. - 12+ years of experience in security architecture, distributed systems security, infrastructure security, or large-scale platform engineering. - Proven track record designing and securing large-scale distributed systems, storage platforms, or cloud-native infrastructure. - Deep understanding of distributed system architectures, including data path and control plane security models. - Extensive expertise in cryptography, encryption frameworks, secure key management systems, and PKI architectures. - Strong experience integrating external KMS platforms using KMIP or equivalent protocols. - Advanced knowledge of IAM frameworks, including RBAC, ABAC, SSO, MFA, federation, delegated authorization, and policy-driven access control systems. - Experience integrating enterprise identity providers such as LDAP, Active Directory, OIDC, and SAML-based systems. - Expertise in secure API design, TLS 1.3, mutual TLS, request signing mechanisms (e.g., SigV4), and service-to-service authentication models. - Experience designing secure multi-tenant platforms with strong isolation, governance, and policy enforcement mechanisms. - Strong understanding of security observability, logging, auditability, SIEM integration, and compliance-driven monitoring architectures. - Demonstrated ability to influence technical direction and drive cross-functional architectural initiatives across engineering organizations. Preferred Qualifications - Experience securing S3-compatible object storage, POSIX/NFS file systems, or high-performance distributed storage environments. - Familiarity with AI/ML infrastructure security, KV cache architectures, memory tiering systems, and GPU-centric distributed environments. - Experience integrating and managing security solutions across large-scale infrastructure platforms, including cloud, network, and application security domains. - Hands-on experience with BYOK architectures, tenant-scoped key management, and cryptographic isolation models. - Experience implementing ABAC using metadata classification, tagging, and contextual policy evaluation. - Strong background in Zero Trust architecture and distributed systems security engineering. - Knowledge of secure deletion techniques, including cryptographic erasure and secure lifecycle management. - Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST, FedRAMP, and enterprise security governance standards. - Experience designing security controls for high-throughput, low-latency distributed systems. - Familiarity with anomaly detection, behavioral analytics, and advanced security telemetry platforms. - Experience with Linux systems, scripting, automation, DevSecOps workflows, and infrastructure security tooling.

Role Description The Director, U.S. Network Facility Security is responsible for leading DSV’s physical security strategy and governance across its U.S. distribution and fulfillment network while serving as the enterprise owner for customer contractual security compliance. This role ensures all facilities consistently meet customer, regulatory, and corporate security requirements through standardized policies, audit readiness, risk management, and Security-by-Design principles. Key responsibilities include: - Customer Security Program Leadership - Security Governance & Compliance - Risk Management & Incident Response - Security by Design - Global Partnership & Enterprise Alignment - Leadership & Strategy Qualifications - Bachelor's degree in Security Management, Criminal Justice, Business, Supply Chain, Engineering, or related field; or equivalent combination of education and experience. - Minimum 10 years of leadership experience in physical security, corporate security, logistics, supply chain, or distribution operations. - Demonstrated experience leading multi-site security programs across the United States. - Experience managing customer contractual security requirements within logistics, manufacturing, distribution, or third-party logistics environments. - Experience leading customer audits, compliance programs, and risk management initiatives. - Strong knowledge of physical security technologies, governance frameworks, and compliance programs. - Proven ability to influence senior leaders across Operations, Engineering, Facilities, Commercial, IT, Legal, and Compliance functions. - Strong executive communication, presentation, and stakeholder management skills. - Ability to travel up to 40%. Requirements - Certified Protection Professional (CPP) - Preferred - Physical Security Professional (PSP) - Preferred - Experience within third-party logistics (3PL), supply chain, fulfillment, or e-commerce operations - Preferred - Experience supporting Fortune 500 customer security programs - Preferred - Knowledge of CTPAT, TAPA, ISO 28000, and other supply chain security frameworks - Preferred Benefits - Information regarding DSV’s benefits offerings, including eligibility, coverage options, and plan details, is available through the DSV Benefits Showcase. - Benefits, programs, and eligibility may vary by location and division in accordance with applicable state and local laws.