# Infrastructure Security Engineer (Bare Metal & Platform)

**Company**: SpaceXAI
**Location**: Palo Alto, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $100,000 - $258,000 USD
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/xai/jobs/5262880007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_14c7f1eb-a45

## Description

SpaceXAI is seeking a hands-on Infrastructure Security Engineer to build and secure its infrastructure from the bare-metal layer up through the platform and application stack.

## Responsibilities:

### Bare metal, data center & network security

- Design and implement secure bare-metal and private-cloud architectures

- Harden physical and virtual fleets: OS baselines, CIS benchmarks, patch and vulnerability management

- Hands-on firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security

- Build and secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware

- Own hybrid connectivity between on-premises and cloud

- Manage identities and privileged access across Active Directory / LDAP / Kerberos and cloud IAM

- Assist with security assessments and audits of physical, on-premises, and hybrid infrastructure

### Platform, containers & developer enablement

- Design and implement secure container and Kubernetes standards on bare metal and private cloud

- Develop and maintain Infrastructure as Code and configuration management with embedded security controls

- Collaborate with development teams so security best practices are integrated into CI/CD pipelines

- Secure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms

### Detection, operations & tooling

- Monitor and respond to security events and incidents spanning bare metal, network devices, hosts, and hybrid cloud

- Maintain SIEM data pipelines that ingest on-premises network, host, and cloud telemetry for reliable alerting

- Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet

- Develop dashboards and alerts from security metrics across physical and platform layers

- Develop and maintain infrastructure security policies, standards, and procedures from metal through platform

- Own security projects end to end: identify issues and implement solutions

- Stay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure

## Basic Qualifications:

- Bachelor's degree in Computer Science, Cybersecurity, or a related field

- 3–5 years of experience in infrastructure security, platform security, or related hands-on roles

- Proven experience securing bare-metal, data-center, or private-cloud environments

- Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security

- Strong proficiency with Puppet for configuration management and fleet hardening in production

## Preferred Skills and Experience:

- Deep expertise operating and securing physical server fleets, colo, or private cloud

- Relevant security certifications

- Strong proficiency with Python and Terraform on production fleets

- Deep expertise in Kubernetes and container security on bare metal or private cloud

## Compensation and Benefits:

- $100,000 - $258,000 USD

- Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

## Skills

### Required
- Infrastructure Security
- Bare Metal Security
- Platform Security
- Network Security
- Kubernetes Security
- Container Security
- Python
- Terraform
- Puppet
- CI/CD Pipelines
- Hybrid Cloud Security

### Nice to have
- Deep expertise operating and securing physical server fleets
- Relevant security certifications
- Strong proficiency with Python and Terraform
- Deep expertise in Kubernetes and container security

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/xai/jobs/5262880007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)