← All roles

Security Engineer, Bare Metal

Fluidstack· Security & Corp IT
Apply on company site
New York, NY, San Francisco, CA, Austin, TX, Seattle, WA$224k - $275kFull-timePosted 3mo ago

About the role

Role focused on end-to-end security for bare metal infrastructure, including supply chain, provisioning, hardening, operation, and secure decommissioning; building and maintaining hardened OS images, BMC security, and fleet-scale encryption with zero-trust networking.

Responsibilities

  • Own end-to-end security for every server in the bare metal fleet, from supply chain and provisioning through hardening, operation, and secure decommissioning.
  • Design and maintain hardened golden OS images with automated vulnerability scanning, patch pipelines, and configuration-drift detection.
  • Define and enforce the BMC security model (access control, credential rotation, audit logging, firmware integrity) for one of the most under-defended surfaces in the industry.
  • Partner with network engineering on micro-segmentation, IDS/IPS, and firewall architecture, applying zero-trust from the top-of-rack up.
  • Implement data-at-rest encryption, key management, and secure storage access at fleet scale, and build the automation that makes secure-by-default the path of least resistance.
  • Lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents touching the physical fleet.

Qualifications

  • You've worked in information security or infrastructure engineering with a strong focus on bare metal, IaaS, or high-scale cloud infrastructure.
  • You harden Linux deeply (SELinux, AppArmor, kernel-level security) and command network security (TCP/IP, VPNs, firewall rulesets, zero-trust).
  • You implement encryption in practice, including disk-level (LUKS) and hardware-level, and you understand HSMs and trusted computing (TPM/TXT).
  • You automate fluently in Python, Go, or Rust, with configuration management (Ansible, Puppet, Chef).
  • You work well across engineering teams and communicate security decisions clearly.
  • Bonus: BMC platforms (OpenBMC, iDRAC, iLO). Hardware root of trust and secure boot. Compliance standards (SOC 2, ISO 27001, FedRAMP). CISSP, OSCP, or CEH.

Skills

Required:Bare metal securityOS hardeningNetwork securityEncryptionAutomationCommunication
Nice to have:BMC security
Last updated Sep 1, 2026. Interested? Apply on the company site.
Fluidstack logo

About Fluidstack

Fluidstack builds civilization-scale infrastructure for AI

Fluidstack builds civilization-scale infrastructure for AI, delivering gigawatts of compute in 6 months. We're leading the deployment of Anthropic's $50B compute build out.

AI infrastructurecompute centershardwaresoftwarepowerdata centersAnthropicfrontier compute
Company profileWebsite

More open roles at Fluidstack