Bare Metal & Platform Security Engineer

SpaceX Super Intelligence; Austin (TX); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, Vision, and Dental

401(k) Retirement Plan

Disability Insurance

Life Insurance

Job summary

SpaceXSI is seeking a hands-on Infrastructure Security Engineer to build and secure its infrastructure from the bare-metal layer to the platform and application stack. You will design, implement, and harden physical and private-cloud foundations while coordinating with engineering to embed security into how we build and run systems.

This role focuses on data centers, colo, and hybrid environments, spanning SpaceXSI, X Social, X Money, and related systems.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of experience in infrastructure security.
• Experience securing bare-metal, data-center, or private-cloud environments.
• Hands-on with firmware and hardware lifecycle security.
• Puppet for fleet hardening in production.
• Knowledge of network security concepts and hybrid connectivity.
• Infrastructure as Code (Terraform).
• Kubernetes security on bare metal/private cloud.
• Python, Bash, and Golang for automation.
• Regulatory compliance familiarity (GDPR, HIPAA, PCI DSS, NIST CSF).
• Experience in regulated financial platforms is a plus.
• Located in SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate.

Responsibilities

• Design and implement secure bare-metal and private-cloud architectures.
• Harden physical and virtual fleets; CIS benchmarks; patch management.
• Firmware, BMC/iDRAC/iLO provisioning and hardware lifecycle security.
• Secure network foundations: segmentation, load balancers, DNS, PKI, NAC, IDS/IPS.
• Own hybrid connectivity between on-premises and cloud.
• Manage identities across AD/LDAP and cloud IAM.
• Assist with security assessments and audits of infrastructure.
• Monitor and remediate infrastructure for regulatory compliance.
• Design and implement secure container and Kubernetes standards on bare metal/private cloud.
• Develop IaC and configuration management (Puppet) with embedded security controls.
• Collaborate with developers to embed security in CI/CD pipelines.
• Secure and enhance CI/CD pipelines; code and image scanning.
• Monitor security events; maintain SIEM pipelines.
• Develop dashboards, alerts, and security policies across layers.
• Own security projects end-to-end and stay current with threats.

Skills

Python

Bash

Golang

Terraform

Puppet

Kubernetes security

Network security

AD/LDAP

Cloud IAM

Automation

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Tools

GitHub Actions

Prometheus

Grafana

CloudWatch

Job description

SpaceXSI is seeking a hands-on Infrastructure Security Engineer to build and secure its infrastructure from the bare-metal layer to the platform and application stack. You will design, implement, and harden physical and private-cloud foundations while coordinating with engineering to embed security into how we build and run systems.

This role focuses on data centers, colo, and hybrid environments, spanning SpaceXSI, X Social, X Money, and related systems.