Bare-Metal & Private-Cloud Infra Security Engineer

SpaceXAI; Palo Alto, Austin, New York, Seattle (CA, TX, NY, WA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, Vision & Dental

401(k)

Job summary

SpaceXAI seeks an hands-on Infrastructure Security Engineer to design, secure, and harden our bare-metal and private-cloud foundations—from servers and networks to orchestration and container platforms. You’ll embed security into CI/CD, manage firmware and hardware lifecycle security, and ensure compliance with PCI, NIST CSF, GDPR, and HIPAA across data centers, colo, and hybrid environments.

The role requires leadership in securing physical and virtual fleets, implementing secure core OS

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of infrastructure security experience.
• Proven experience securing bare-metal, data-center, or private-cloud environments.
• Hands-on firmware, BMC/iDRAC/iLO, and hardware lifecycle security.
• Strong Puppet for fleet hardening and config management.

Responsibilities

• Design secure bare-metal and private-cloud architectures (servers, storage, out-of-band management).
• Harden OS baselines, patching, and secure boot workflows.
• Manage firmware, BMC/iDRAC/iLO provisioning and hardware lifecycle security.
• Secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware.
• Own hybrid connectivity between on-premises and cloud and manage IAM across AD/LDAP and cloud IAM.
• Assist with security assessments and audits of physical, on-premises, and hybrid infra.
• Monitor and remediate infrastructure to comply with PCI, NIST CSF, GDPR, HIPAA.

Skills

Python

Bash

Golang

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Puppet

Terraform

Kubernetes

VMware/OpenStack/Proxmox

Job description

SpaceXAI seeks an hands-on Infrastructure Security Engineer to design, secure, and harden our bare-metal and private-cloud foundations—from servers and networks to orchestration and container platforms. You’ll embed security into CI/CD, manage firmware and hardware lifecycle security, and ensure compliance with PCI, NIST CSF, GDPR, and HIPAA across data centers, colo, and hybrid environments.

The role requires leadership in securing physical and virtual fleets, implementing secure core OS