Bare Metal InfoSec Engineer for AI Compute Infra

Fluidstack; Austin (TX); On-site; USD 269,000 - 330,000; Full time

Job summary

Fluidstack, based in Austin, TX, seeks a security engineer to own end-to-end security for every server in the bare metal fleet—from supply chain through decommissioning—maintaining hardened OS images and enforcing secure configurations.

You will collaborate across teams to apply zero-trust, implement data-at-rest encryption, and drive threat modeling for new hardware and network designs. Experience with Linux hardening and automation in Python/Go/Rust is required.

Qualifications

• You've worked in information security or infrastructure engineering with a strong focus on bare metal, IaaS, or high‑scale cloud infrastructure.
• You harden Linux deeply (SELinux, AppArmor, kernel‑level security) and command network security (TCP/IP, VPNs, firewall rulesets, zero‑trust).
• You implement encryption in practice, including disk‑level (LUKS) and hardware‑level, and you understand HSMs and trusted computing (TPM/TXT).
• You automate fluently in Python, Go, or Rust, with configuration management (Ansible, Puppet, Chef).
• You work well across engineering teams and communicate security decisions clearly.
• Bonus: BMC platforms (OpenBMC, iDRAC, iLO). Hardware root of trust and secure boot. Compliance standards (SOC 2, ISO 27001, FedRAMP). CISSP, OSCP, or CEH.

Responsibilities

• Own end-to-end security for every server in the bare metal fleet, from supply chain and provisioning through hardening, operation, and secure decommissioning.
• Design and maintain hardened golden OS images with automated vulnerability scanning, patch pipelines, and configuration-drift detection.
• Define and enforce the BMC security model (access control, credential rotation, audit logging, firmware integrity) for one of the most under-defended surfaces in the industry.
• Partner with network engineering on micro‑segmentation, IDS/IPS, and firewall architecture, applying zero‑trust from the top‑of‑rack up.
• Implement data‑at‑rest encryption, key management, and secure storage access at fleet scale, and build the automation that makes secure‑by‑default the path of least resistance.
• Lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents touching the physical fleet.

Skills

Bare metal security

IaaS/high-scale cloud

Linux hardening

Network security

Data encryption

Python/Go/Rust

Automation/config mgmt

Zero-trust

Threat modelling

Security reviews

Tools

OpenBMC

iDRAC

iLO

Ansible

Job description

Fluidstack, based in Austin, TX, seeks a security engineer to own end-to-end security for every server in the bare metal fleet—from supply chain through decommissioning—maintaining hardened OS images and enforcing secure configurations.

You will collaborate across teams to apply zero-trust, implement data-at-rest encryption, and drive threat modeling for new hardware and network designs. Experience with Linux hardening and automation in Python/Go/Rust is required.