Bare-Metal & Platform Security Engineer

VulnU; New York, Northern (NY, KY); Hybrid; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical coverage

401(k)

Job summary

SpaceXAI is hiring a hands-on Infrastructure Security Engineer to build and secure our bare-metal, data center, and private-cloud infrastructure, spanning servers, networks, and identity management. You will harden firmware, OS baselines, and platform security across on-premises and hybrid environments.

You’ll design secure container standards, IaC tooling with Puppet and Terraform, and collaborate with engineering to embed security in CI/CD pipelines.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of infrastructure security experience.
• Experience securing bare-metal, data-center, or private-cloud environments.
• Experience with firmware, BMC/iDRAC/iLO, and hardware lifecycle security.
• Strong Puppet for configuration management and fleet hardening.
• Knowledge of network security concepts and hybrid connectivity.

Responsibilities

• Secure bare-metal and private-cloud architectures (servers, storage, firmware).
• Harden OS baselines; manage patching and CIS benchmarks.
• Secure network foundations and hybrid connectivity (VPN, Direct Connect, SD-WAN).
• Implement secure container and Kubernetes standards; RBAC and secrets.
• Develop and maintain Infrastructure as Code (Puppet, Terraform).
• Support CI/CD security integration and code/image scanning.
• Monitor and respond to security events across bare metal to cloud.

Skills

Bare-metal security

Data center security

Puppet

Terraform

Kubernetes security

CI/CD security

Python

AD/LDAP federation

BMC/iDRAC/iLO

Education

Bachelor's degree in Computer Science or related field

Tools

Puppet

Terraform

Kubernetes

VMware/OpenStack/Proxmox

Job description

SpaceXAI is hiring a hands-on Infrastructure Security Engineer to build and secure our bare-metal, data center, and private-cloud infrastructure, spanning servers, networks, and identity management. You will harden firmware, OS baselines, and platform security across on-premises and hybrid environments.

You’ll design secure container standards, IaC tooling with Puppet and Terraform, and collaborate with engineering to embed security in CI/CD pipelines.