Complexio's Foundational AI works to automate business activities by ingesting whole company data – both structured and unstructured – and making sense of it. Using proprietary models and algorithms Complexio forms a deep understanding of how humans are interacting and using it. Automation can then replicate and improve these actions independently.
Complexio is a joint venture between Hafnia and Símbolo, in partnership with Marfin Management, C Transport Maritime, Trans Sea Transport and BW Epic Kosan.
We're seeking an exceptional security developer to join our efforts in implementing a sophisticated privacy-preserving access control framework across our autonomous business process automation platform.
You will need strong Python development experience as you will be building a custom encryption service within a micro-services architecture. The scope covers secure service development, OAuth integrations, and identity provider connections.
Key Responsibilities
- Design and implement a comprehensive data privacy and access control architecture that addresses multi-dimensional classification, dynamic permissions, and information barriers
- Focus on privacy-preserving access controls and coordinate with cross-functional teams including data ingestion, knowledge mapping, and automation developers
- Develop and enforce security and privacy standards, policies, and best practices throughout the product development lifecycle
Technical Implementation
Architect a multi-layered access control model combining Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and purpose-based limitationsOversee implementation of fine-grained data classification frameworks using NLP and other technologiesDesign and validate permission propagation mechanisms for graph data models and derived insightsEstablish security boundaries for autonomous AI agents, ensuring proper context isolation and privilege controlsCross-Team Coordination
Work closely with engineering teams to integrate privacy controls into the data pipeline, knowledge graph, and AI componentsCollaborate with product management to balance privacy requirements with usability and functionalityCoordinate with customer success to address client-specific privacy and compliance needsInfluence and guide development teams to prioritize privacy-by-design principlesRequirements
5+ years of experience in information security, data privacy, or access control systemsProven track record designing and implementing complex security architecturesStrong knowledge of modern authorization frameworks, RBAC / ABAC systems, and data classification methodologiesExperience leading teams and influencing cross-functional stakeholdersTechnical background with understanding of databases, APIs, and enterprise software architecturePreferred Skills & Experience
Knowledge of AI / ML systems and the unique privacy challenges they presentUnderstanding of data privacy regulations (GDPR, CCPA) and their technical implementation requirementsFamiliarity with LLMs and the privacy implications of their use in enterprise contextsUnderstanding of vector databases and embedding-based systemsExperience in regulated industries (finance, healthcare, legal) with complex information barrier requirementsBackground in data lineage and provenance tracking systemsExperience with graph databases (particularly Neo4j) and their security modelsSecurity certifications such as CISSP, CIPT, or CIPP / ECore Development Skills
Experience building encryption systems (e.g. using AES, RSA, and key management services)Hands-on development with OAuth 2.0, OpenID Connect, JWT validation, and RBAC / ABAC systemsBuilding secure REST / GraphQL APIs with middleware for authentication, rate limiting, and input validationImplementing access controls, query filtering, and audit logging for SQL and NoSQL databasesSecuring pub / sub systems with encryption, authentication, and access controlsRequired Technologies
Python (async / await, cryptography libraries, FastAPI)Container security (Docker, Kubernetes secrets, network policies)Identity providers (Microsoft EntraID, Okta, Auth0 integration)Database systems (PostgreSQL, Redis, experience with graph databases preferred)Cloud security (AWS / Azure IAM, KMS, security groups)Practical Experience
Built production encryption / decryption systems handling sensitive data at scaleImplemented fine-grained permission systems beyond simple role-based accessDeveloped secure multi-tenant applications with data isolation between customersCreated audit logging and compliance reporting for regulated environmentsIntegrated with enterprise identity systems in complex organizational structuresBenefits
Work with a groundbreaking AI platform solving real enterprise pain pointsHelp clients achieve measurable ROI through next-gen automationJoin a remote-first, globally distributed team backed by industry leadersShape the success function and influence product direction in a fast-scaling AI company