Software Engineer, Infrastructure Security

Details

Security is at the foundation of OpenAI's mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI's technology, people, and products, supporting every product and research effort through a collaborative security culture.

The Infrastructure Security team safeguards OpenAI's research and production environments, including GPU supercomputing clusters, multi-cloud infrastructure, datacenters, networking, storage, Kubernetes clusters, service meshes, and data pathways carrying sensitive model weights and user data.

The role involves designing and building foundational security services, including authentication systems, egress and ingress proxies, access brokers, and key-management platforms. These systems must provide high reliability, scalability, and resilience under intense scale and adversarial pressure.

Responsibilities

• Architect and implement production-grade security services such as authentication services, access brokers, secure proxies, and key-management infrastructure across hardware, operating systems, Kubernetes, networks, and CI/CD.
• Partner with infrastructure and research engineers to embed security into high-performance compute clusters.
• Develop automation and detection tooling to continuously identify and mitigate risks in large-scale cloud and on-premises environments.
• Drive initiatives involving line-speed encryption, machine identity, and network isolation for emerging AI workloads.
• Lead or participate in design reviews and threat modeling to ensure strong security foundations and operational excellence.

Requirements

• Strong software engineering skills in languages such as Python, Go, Rust, or C/C++.
• A track record of shipping and operating highly reliable distributed services.
• Experience building or operating critical security infrastructure, such as authentication services, service-to-service proxies, certificate systems, or key-management systems.
• Deep understanding of security principles, best practices, and common vulnerabilities.
• Expertise securing large-scale cloud platforms such as Azure, AWS, or GCP, including multi-cloud networks and cloud-agnostic system design.
• Familiarity with container and orchestration security, including Kubernetes and service meshes.
• Familiarity with modern authentication and authorization standards, including OIDC, mTLS, and SPIFFE/SPIRE.
• A proactive mindset and the ability to address security gaps or inefficiencies through automation and tooling.
• A track record of delivering scalable infrastructure solutions and driving impactful changes in real-world projects.
• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.

Benefits

• Base salary of $230,000–$385,000 per year, plus equity.
• Medical, dental, and vision insurance, with employer contributions to Health Savings Accounts.
• Pre-tax accounts for health, dependent care, and commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental, medical, and caregiver leave.
• Paid time off, company holidays, office closures, and paid sick or safe time.
• Mental health and wellness support.
• Employer-paid basic life and disability coverage.
• Annual learning and development stipend.
• Daily office meals and eligible meal delivery credits.
• Relocation support for eligible employees.
• Additional benefits may include charitable donation matching and wellness stipends.

OpenAI is an equal opportunity employer and provides reasonable accommodations to applicants with disabilities. Background checks are administered in accordance with applicable law.