Platform Architect - Agentic Trust

Entrust
United States, United Kingdom
Full timeUSD 251,672 - 369,119 annuallyFunction: DevOps, Cloud & InfrastructureExperience: 15+ yearsEducation: bachelorsSkills: ["Leadership","Mentorship","Collaboration","Strategic influence","Innovation"]

Architect and govern the Entrust Agentic Trust Layer across four planes (Identity, Authority, Execution, Assurance), ensuring a cohesive reference architecture and dependency contracts for multiple product teams. Own agent identity and evidence architectures (SPIFFE/SPIRE workload identity, attestation, Permission Slip, tamper-evident Evidence Ledger) and define policy and authorization mechanisms with clear fail-open/fail-closed behavior. Partner with executives, engineering, security, and standards bodies to shape emerging agentic trust and deliver secure, compliant, scalable outcomes.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Entrust
Entrust
2 hours ago

Platform Architect - Agentic Trust

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Architect and govern the Entrust Agentic Trust Layer across four planes (Identity, Authority, Execution, Assurance), ensuring a cohesive reference architecture and dependency contracts for multiple product teams. Own agent identity and evidence architectures (SPIFFE/SPIRE workload identity, attestation, Permission Slip, tamper-evident Evidence Ledger) and define policy and authorization mechanisms with clear fail-open/fail-closed behavior. Partner with executives, engineering, security, and standards bodies to shape emerging agentic trust and deliver secure, compliant, scalable outcomes.
Location: United States, United Kingdom
Employment Type: Full time
Job Function: DevOps, Cloud & Infrastructure
Seniority: Sr. Manager level

Key Responsibilities

  • •Define and maintain the Agentic Trust Layer architecture strategy/roadmap across four planes, serving as normative reference and design authority.
  • •Establish architectural principles, standards, governance, and boundary review processes to resolve scope conflicts across the trust layer and lines of business.
  • •Own agent identity, authority, and evidence architectures, including Agent Passport (SPIFFE/SPIRE, attestation, CA roots, HSM-protected keys) and the Permission Slip framework.
  • •Define policy and authorization architecture across Authority and Execution planes (policy engine, MCP gateway, just-in-time authorization) with explicit latency budgets and fail-open/fail-closed behavior.
  • •Partner with cybersecurity, executive leadership, and standards bodies; chair architecture review and boundary review forums; manage architecture risk and ensure compliance, scalability, and operational excellence.

Pay and Benefits

Salary: USD 251,672 - 369,119 annually

Key Requirements

  • •Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
  • •15+ years of progressive technology leadership experience.
  • •7+ years leading enterprise architecture programs or platform and security architecture for identity, cryptography, or trust infrastructure products.
  • •Deep, applied expertise in cryptography and public key infrastructure, including certificate authorities, key lifecycle/custody, HSMs, and signing services.
  • •Experience designing workload identity and delegated authorization, including SPIFFE/SPIRE (SVIDs, mutual TLS) and OAuth 2.x/token exchange with externalized policy (PBAC/ABAC).
Experience:15+ yearsIdentity-centric securityCryptographyPublic key infrastructureCloudEnterprise architectureRegulated industries
Education:Bachelor's
Skills:LeadershipMentorshipCollaborationStrategic influenceInnovation
Tech Stack:SPIFFESPIRESVIDsMutual TLSOAuth 2.xToken exchangePBACABACMermaid-backed logsMerkle-backed logsCertificate TransparencyAppend-only systemsConfidential computingAzureAWSGoogle CloudHSMHardware roots of trustC2PAMCP Gateway

Company Brief

Entrust
Provides identity, authentication, and secure transaction solutions including public key infrastructure (PKI), digital certificates, encryption, and secure issuance for payments, mobile, and enterprise environments to protect digital identities and critical communications.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Funding: Private Equity Backed
Headquarters: Minneapolis, United States
Founded: 1994
WebsiteLinkedIn