Bare-Metal Information Security Engineer — Guard AI Compute

Fluidstack; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Fluidstack is building frontline compute infrastructure for AI at scale. The Security Team owns end-to-end security for all bare-metal servers, from supply chain through decommissioning, and designs hardened OS images with automated vulnerability scanning.

You will shape the BMC security model, network segmentation, and data-at-rest encryption across a fleet, while leading threat modeling for new hardware and incident response.

Qualifications

• You’ve worked in information security or infrastructure engineering with a strong focus on bare metal, IaaS, or high-scale cloud infrastructure.
• Hardening Linux deeply: SELinux, AppArmor, kernel security.
• Command network security: TCP/IP, VPNs, firewall rules, zero-trust.
• Implement disk-level encryption (LUKS) and hardware-level encryption.
• Understand HSMs and trusted computing (TPM/TXT).
• Automation: Python, Go, or Rust.
• Configuration management: Ansible, Puppet, Chef.
• Bonus: BMC platforms and hardware root of trust; Secure boot; Certifications (CISSP, OSCP, CEH).

Responsibilities

• Own end-to-end security for every server in the bare metal fleet, from supply chain and provisioning through hardening, operation, and secure decommissioning.
• Design and maintain hardened golden OS images with automated vulnerability scanning, patch pipelines, and configuration-drift detection.
• Define and enforce the BMC security model (access control, credential rotation, audit logging, firmware integrity) for one of the most under-defended surfaces in the industry.
• Partner with network engineering on micro-segmentation, IDS/IPS, and firewall architecture, applying zero-trust from the top-of-rack up.
• Implement data-at-rest encryption, key management, and secure storage access at fleet scale, and build the automation that makes secure-by-default the path of least resistance.
• Lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents touching the physical fleet.

Skills

Info security

Linux hardening

Network security

Disk encryption

Hardware security

HSMs/TPM

Python

Go

Rust

Configuration management

Cross-team collaboration

BMC platforms

Secure boot

Certifications

Tools

Ansible

Puppet

Chef

Job description

Fluidstack is building frontline compute infrastructure for AI at scale. The Security Team owns end-to-end security for all bare-metal servers, from supply chain through decommissioning, and designs hardened OS images with automated vulnerability scanning.

You will shape the BMC security model, network segmentation, and data-at-rest encryption across a fleet, while leading threat modeling for new hardware and incident response.