Deployment Architect

Role: Enterprise AI - Deployment Architect

Location: New York City, Madison Square Park area

Reports to: Head of Engineering, Enterprise AI

Experience Level: 10+ years

Work Model: Hybrid, with regular in-office presence

Why Join Enterprise AI?

Enterprise AI is building the platform that enables secure and reliable deployment of AI systems inside regulated enterprises.

As a Deployment Architect, you will own the deployment architecture for client cloud, dedicated, and sovereign environments. You will help define the security controls, compliance evidence, and deployment patterns required to move enterprise AI systems through vendor reviews and into production.

You will work directly with client security, infrastructure, and compliance teams, including bank and government information security organizations. This is a high-ownership role for someone who combines deep infrastructure security expertise with strong client-facing judgment.

As a Deployment Architect, You Will

Design Enterprise Deployment Architectures

Create secure reference architectures for client cloud environments, dedicated instances, sovereign deployments, and other customer-controlled environments across AWS, Azure, and GCP.

Lead Security and Compliance Readiness

Define security controls, compliance evidence, and deployment standards required for regulated enterprise customers.

Partner with Client Security Teams

Lead vendor-review conversations with bank, government, and other regulated enterprise information security teams. Translate their requirements into clear technical and operational actions.

Build Secure Platform Guardrails

Help implement policy-as-code guardrails, identity controls, key custody models, admission controls, image signing, and other security mechanisms within the platform and its CI systems.

Own Threat Modeling

Evaluate risks associated with agents, connectors, prompt injection, data exfiltration, privileged access, and software supply chains.

Establish Operational Readiness

Help build the incident response, vulnerability management, and security operations processes required to support enterprise deployments.

The Anti-Sell

Hands-on infrastructure security: This is not an application security or GRC-only role. You must have personally designed and operated infrastructure and cloud security systems.

Regulated enterprise complexity: You will work with demanding security, compliance, and vendor-risk teams in regulated environments.

Client-facing accountability: You will be expected to lead security conversations directly with customers and translate technical requirements into practical deployment decisions.

Technical depth: The role requires strong experience across cloud security, Kubernetes security, identity, compliance evidence, infrastructure as code, and enterprise deployment architecture.

Our Enterprise AI Deployment Architects Typically Have

Deep security and cloud architecture experience: Ten or more years in security engineering or cloud architecture, including experience at a regulated company or a vendor that sells into regulated enterprises.

Vendor security review experience: A track record of personally leading a vendor security review through approval at a global bank, government body, or similarly regulated institution.

Compliance program leadership: Experience leading a SOC 2 or ISO 27001 program and producing the technical evidence required for external review.

Multi-cloud infrastructure expertise: Strong knowledge of AWS, Azure, and GCP security architecture, including landing zones, private networking, KMS, and air-gapped deployment patterns.

Kubernetes and identity security expertise: Experience with pod security, admission control, image signing, federation with client identity providers, privileged access, and key custody.

Client-ready threat modeling: The ability to assess risks across agents, connectors, prompt injection, data exfiltration, and software supply chains, and communicate practical mitigations to technical and executive stakeholders.

Candidates whose experience is limited to application security or GRC without hands-on infrastructure experience, or who have never worked directly with clients, will not be a fit for this role.

Top-Tier Candidates Will Have

Experience delivering sovereign cloud or data residency solutions.

Experience with Saudi, European Union, or other complex regulatory environments.

Experience supporting security reviews for financial institutions or government customers.

Experience building security controls into infrastructure and CI systems.

Values