Security Architect, Agentic AI

Stack

Responsibilities

• ▹Build secure agent runtimes, libraries, and reference implementations, implementing core agent patterns like planner/executor, tool routing, and RAG boundaries
• ▹Build and secure MCP servers, clients, tool registries, and connector patterns with robust authentication, authorization, and audit logging
• ▹Enforce secure-by-default controls including schema validation, tool allowlists, redaction, and policy checks
• ▹Threat model and test agent workflows for prompt injection and data exfiltration to build repeatable security evaluations

Requirements

• ▹Foundational understanding of AI/ML technologies and experience securing or positioning AI-driven solutions within your functional domain
• ▹Extensive experience designing and implementing agent runtimes including planning, tool calling, and memory/state controls
• ▹8+ years of experience shipping production security engineering solutions with strong coding skills in Python, TypeScript, or Node
• ▹Practical experience integrating frontier model APIs with structured outputs, streaming, and safety controls
• ▹Familiarity with agent frameworks such as LangGraph, LangChain, or Semantic Kernel, paired with solid cloud and Kubernetes security engineering experience

Nice to have

• ▹Experience designing advanced guardrail architectures or real-time alignment enforcement mechanisms for autonomous multi-agent orchestration
• ▹Familiarity with OWASP LLM Top 10, MITRE ATLAS, or the NIST AI RMF, and experience building red-team style testing or evaluation harnesses for LLM applications and agents
• ▹Strong background in data security for RAG, including retrieval authorization and tenancy boundaries

Soft skills

What we offer

• ▹Health plans
• ▹Paid vacation and sick time
• ▹Parental leave options
• ▹Retirement plan options
• ▹Education reimbursement
• ▹In-office perks (for hybrid arrangements)

About the company

Zscaler accelerates digital transformation, powering its cloud-native Zero Trust Exchange platform with the world's largest security data lake, protecting users, devices, and applications from cyberattacks and data loss anywhere they work.