Security Architect Manager (Corporate & Cloud Security)

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development. The role is responsible for defining and implementing security architecture principles, designing secure cloud-native environments, and embedding security throughout infrastructure provisioning and software development lifecycles. The successful candidate will combine deep technical expertise in Kubernetes and cloud security with proven team leadership, architectural design, and cross-functional collaboration skills. They will work closely with Cloud Engineering, DevOps, R&D, Platform Engineering, IT, and Security teams to ensure that security is built into the organization’s technology foundations. Your responsibilities will include: Cybersecurity Architecture • Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. • Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. • Translate threat models, business requirements, and risk assessments into practical security controls. • Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. • Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security • Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. • Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. • Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. • Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. • Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. • Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. • Establish security controls for container orchestration platforms across development, testing, and production environments. • Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security • Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. • Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. • Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. • Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies.