Infrastructure Security Engineer (Bare Metal & Platform)

SpaceXAI is seeking a hands-on Infrastructure Security Engineer to build and secure its infrastructure from the bare-metal layer up through the platform and application stack.

Responsibilities:

Bare metal, data center & network security

• Design and implement secure bare-metal and private-cloud architectures
• Harden physical and virtual fleets: OS baselines, CIS benchmarks, patch and vulnerability management
• Hands-on firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
• Build and secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware
• Own hybrid connectivity between on-premises and cloud
• Manage identities and privileged access across Active Directory / LDAP / Kerberos and cloud IAM
• Assist with security assessments and audits of physical, on-premises, and hybrid infrastructure

Platform, containers & developer enablement

• Design and implement secure container and Kubernetes standards on bare metal and private cloud
• Develop and maintain Infrastructure as Code and configuration management with embedded security controls
• Collaborate with development teams so security best practices are integrated into CI/CD pipelines
• Secure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms

Detection, operations & tooling

• Monitor and respond to security events and incidents spanning bare metal, network devices, hosts, and hybrid cloud
• Maintain SIEM data pipelines that ingest on-premises network, host, and cloud telemetry for reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet
• Develop dashboards and alerts from security metrics across physical and platform layers
• Develop and maintain infrastructure security policies, standards, and procedures from metal through platform
• Own security projects end to end: identify issues and implement solutions
• Stay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure

Basic Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3–5 years of experience in infrastructure security, platform security, or related hands-on roles
• Proven experience securing bare-metal, data-center, or private-cloud environments
• Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
• Strong proficiency with Puppet for configuration management and fleet hardening in production

Preferred Skills and Experience:

• Deep expertise operating and securing physical server fleets, colo, or private cloud
• Relevant security certifications
• Strong proficiency with Python and Terraform on production fleets
• Deep expertise in Kubernetes and container security on bare metal or private cloud

Compensation and Benefits:

• $100,000 - $258,000 USD
• Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.