Infrastructure Security Engineer (Bare Metal & Platform)

Details

About the Role

We are seeking a hands-on Infrastructure Security Engineer to build and secure SpaceXAI’s infrastructure from the bare-metal layer through the platform and application stack. The role involves designing, implementing, and hardening physical and private-cloud foundations, including servers, networks, identity, and orchestration, while extending security across containers, automation, and hybrid connectivity with public cloud.

The role focuses on securing critical infrastructure across data centers, colocation, and hybrid environments, with work that may span SpaceXAI, X Social, X Money, and related systems. The successful candidate will take an automation-first approach to building secure foundations at the metal and operating system layers, hardening platforms at scale, and embedding security into engineering processes.

Responsibilities

Bare Metal, Data Center, and Network Security

• Design and implement secure bare-metal and private-cloud architectures covering servers, storage, out-of-band management, and BIOS/UEFI/BMC firmware posture.
• Harden physical and virtual fleets using Linux and Windows operating system baselines, CIS benchmarks, patch and vulnerability management, and secure boot or measured boot where applicable.
• Manage firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security.
• Build and secure network foundations, including segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on physical hardware.
• Own hybrid connectivity between on-premises and cloud environments, including site-to-site VPN, Direct Connect, Interconnect, ExpressRoute, SD-WAN, and zero-trust access.
• Manage identities and privileged access across Active Directory, LDAP, Kerberos, and cloud IAM, including federation, SAML/OIDC, and PAM.
• Assist with security assessments and audits of physical, on-premises, and hybrid infrastructure.
• Monitor and remediate infrastructure to meet regulations and best practices such as PCI, NIST CSF, GDPR, and HIPAA.

Platform, Containers, and Developer Enablement

• Design and implement secure container and Kubernetes standards on bare metal and private cloud, including RBAC, network policies, and secrets management.
• Develop and maintain Infrastructure as Code and configuration management, especially Puppet, with embedded security controls for physical and virtual fleets.
• Collaborate with development teams to integrate security best practices into CI/CD pipelines.
• Secure and enhance CI/CD pipelines and integrate and maintain code and image scanning platforms.

Detection, Operations, and Tooling

• Monitor and respond to security events and incidents across bare metal, network devices, hosts, and hybrid cloud.
• Maintain SIEM data pipelines that ingest on-premises network, host, and cloud telemetry for reliable alerting.
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet.
• Develop dashboards and alerts based on security metrics across physical and platform layers.
• Develop and maintain infrastructure security policies, standards, and procedures from the metal through the platform.
• Own security projects end to end, from issue identification through solution implementation.
• Stay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of experience in infrastructure security, platform security, or related hands-on roles.
• Proven experience securing bare-metal, data-center, or private-cloud environments; cloud-only experience is not sufficient.
• Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security.
• Strong proficiency with Puppet for configuration management and production fleet hardening.
• Strong understanding of network security concepts and protocols, including hands-on experience with firewalls, segmentation, and hybrid connectivity.
• Experience with hybrid identity, such as AD/LDAP or similar systems, integrated or federated with cloud IAM.
• Experience with Infrastructure as Code, such as Terraform, applied to physical or virtual machine fleets.
• Familiarity with containerization and Kubernetes security implications, including on-premises or bare-metal clusters.
• Experience with Python, Bash, Golang, or similar languages for automation and tool development.
• Familiarity with regulatory compliance requirements such as GDPR, HIPAA, PCI DSS, and NIST CSF.
• Experience in banking, money transmission, peer-to-peer payments, or similarly regulated financial platforms.
• Proactive mindset with strong ownership, critical-thinking, and problem-solving skills.
• Located in the San Francisco Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office.

Preferred Skills and Experience

• Deep expertise operating and securing physical server fleets, colocation, or private cloud using VMware, OpenStack, Proxmox, Nutanix, or similar platforms.
• Relevant security certifications such as CCSP, CSSK, OSCP, or network or cloud security specialties.
• Strong proficiency with Python and Terraform on production fleets.
• Deep expertise in Kubernetes and container security on bare metal or private cloud.
• Experience with multi-cloud and cloud-to-on-premises security.
• Knowledge of CI/CD best practices and tools, with hands-on GitHub Actions or equivalent experience.
• Experience with observability and security operations tooling such as Prometheus, Grafana, CloudWatch, Karma, and SIEM platforms such as Wazuh.
• Experience building custom security tools or integrations.
• Interest in applying AI to infrastructure security monitoring and automation.
• Contributions to open-source infrastructure or security projects.
• Experience securing AI/ML and GPU workloads on bare metal or hybrid infrastructure.

Compensation and Benefits

• Base salary: $100,000–$258,000 USD.
• Equity.
• Comprehensive medical, vision, and dental coverage.
• Access to a 401(k) retirement plan.
• Short- and long-term disability insurance.
• Life insurance.
• Various other discounts and perks.

SpaceXAI is an equal opportunity employer. Recruitment information is available in the Recruitment Privacy Notice.