Infrastructure Security Engineer, Bare Metal & Platform

INFRASTRUCTURE SECURITY ENGINEER, BARE METAL & PLATFORM

We are seeking a hands-on Infrastructure Security Engineer to build and secure SpaceXSI's infrastructure from the bare-metal layer up through the platform and application stack. In this role, you will design, implement, and harden physical and private-cloud foundations—servers, networks, identity, and orchestration—and carry that security posture into containers, automation, and hybrid connectivity with public cloud.

This role focuses on securing critical infrastructure spanning data centers, colo, and hybrid environments, with work that may span platforms such as SpaceXSI, X Social, X Money, and related systems. You’ll operate with an automation-first mindset: building secure foundations at the metal and OS layer, hardening platforms at scale, and partnering closely with engineering so security is embedded in how we build and run systems—not bolted on after the fact.

BASIC QUALIFICATIONS

• Bachelor's degree in computer science, cybersecurity, or other scientific discipline
• 3+ years of experience in infrastructure security, platform security, or other hands-on security roles
• Experience securing bare-metal, data-center, or private-cloud environments (not cloud-only resumes)
• Experience securing AI/ML and GPU workloads on bare metal or hybrid infrastructure

PREFERRED SKILLS AND EXPERIENCE

• Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
• Strong proficiency with Puppet for configuration management and fleet hardening in production
• Strong understanding of network security concepts and protocols, including hands-on work with firewalls, segmentation, and hybrid connectivity
• Experience with hybrid identity (AD/LDAP or similar) integrated or federated with cloud IAM
• Experience with Infrastructure as Code (e.g., Terraform) applied to physical or VM fleets
• Experience with languages (e.g., Python, Bash and Golang) for automation and tool development
• Familiarity with containerization and Kubernetes security implications, including on-premises or bare-metal clusters
• Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)
• Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Deep expertise operating and securing physical server fleets, colo, or private cloud (VMware, OpenStack, Proxmox, Nutanix, or similar)
• Relevant security certifications (e.g., CCSP, CSSK, OSCP, network or cloud security specialty)
• Strong proficiency with Python and Terraform on production fleets
• Deep expertise in Kubernetes and container security on bare metal or private cloud
• Experience with multi-cloud and cloud-to-on-prem security
• Knowledge of CI/CD best practices and tools; hands-on GitHub Actions or equivalent
• Experience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)
• Experience building custom security tools or integrations
• Interest in leveraging AI for infrastructure security monitoring and automation
• Contributions to open-source infrastructure or security projects

ADDITIONAL REQUIREMENTS

• Located in the SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office

COMPENSATION AND BENEFITS

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.