← All roles

Infrastructure Security Engineer (Bare Metal & Platform)

xAI· Information Security
Apply on company site
Hybrid (SF Bay Area / Austin / New York / Palo Alto / Seattle)$100k - $258kfull-timePosted 1w ago

About the role

Hands-on role to design, implement, and harden SpaceXSI infrastructure from bare-metal up through platform and application stacks, covering data centers, colo, and hybrid environments with an automation-first mindset.

Responsibilities

  • Design and implement secure bare-metal and private-cloud architectures (servers, storage, out-of-band management, BIOS/UEFI/BMC firmware posture)
  • Harden physical and virtual fleets: OS baselines (Linux/Windows), CIS benchmarks, patch and vulnerability management, and secure boot / measured boot where applicable
  • Hands-on firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
  • Build and secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware
  • Own hybrid connectivity between on-premises and cloud (site-to-site VPN, Direct Connect / Interconnect / ExpressRoute, SD-WAN, zero-trust access)
  • Manage identities and privileged access across Active Directory / LDAP / Kerberos and cloud IAM (federation, SAML/OIDC, PAM)
  • Assist with security assessments and audits of physical, on-premises, and hybrid infrastructure
  • Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)
  • Design and implement secure container and Kubernetes standards on bare metal and private cloud (RBAC, network policy, secrets)
  • Develop and maintain Infrastructure as Code and configuration management—especially Puppet— with embedded security controls
  • Collaborate with development teams to integrate security into CI/CD pipelines
  • Secure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms
  • Monitor and respond to security events and incidents across bare metal, network devices, hosts, and hybrid cloud
  • Maintain SIEM data pipelines ingesting on-premises network, host, and cloud telemetry
  • Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet
  • Develop dashboards and alerts from security metrics across physical and platform layers
  • Develop and maintain infrastructure security policies, standards, and procedures from metal through platform
  • Own security projects end to end: identify issues and implement solutions
  • Stay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure

Qualifications

  • Bachelor's degree in Computer Science, Cybersecurity, or related field
  • 3–5 years of experience in infrastructure security, platform security, or related hands-on roles
  • Proven experience securing bare-metal, data-center, or private-cloud environments
  • Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
  • Strong proficiency with Puppet for configuration management and fleet hardening in production
  • Strong understanding of network security concepts and protocols, including hands-on work with firewalls, segmentation, and hybrid connectivity
  • Experience with hybrid identity (AD/LDAP or similar) integrated or federated with cloud IAM
  • Experience with Infrastructure as Code (e.g., Terraform) applied to physical or VM fleets
  • Familiarity with containerization and Kubernetes security implications, including on-premises or bare-metal clusters
  • Experience with languages (Python, Bash, Golang) for automation and tool development
  • Familiarity with regulatory compliance requirements (GDPR, HIPAA, PCI DSS, NIST CSF)
  • Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms
  • Proactive mindset with strong ownership, critical thinking, and problem-solving skills
  • Located in SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office

Skills

Required:Bare-metal and private-cloud securityPuppetTerraformKubernetes security (on bare metal/private cloud)CI/CD securityPython, Bash, GolangNetworking and hybrid connectivitySecurity operations and SIEM

Benefits

  • equity
  • comprehensive medical, vision, and dental coverage
  • 401(k) retirement plan
  • short & long-term disability insurance
  • life insurance
  • various other discounts and perks
Last updated Oct 14, 2026. Interested? Apply on the company site.

About xAI

liquid-ai-recruiting-target
Company profileWebsite

More open roles at xAI