Bare-Metal & Private-Cloud Security Engineer

SpaceX Super Intelligence; Seattle (WA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical coverage

Vision coverage

Dental coverage

401(k)

Job summary

SpaceXSI is seeking a hands-on Infrastructure Security Engineer to secure its bare-metal and private-cloud infrastructure from hardware to platform level. You will design, implement, and harden systems, ensuring secure foundations and platform security across data centers, colo, and hybrid environments.

You will collaborate with engineering to embed security into CI/CD and automate security controls using Puppet, Terraform, Python, and Kubernetes security practices.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of infrastructure security experience in hands-on roles.
• Proven experience securing bare-metal, data-center, or private-cloud environments.
• Hands-on firmware, BMC/iDRAC/iLO provisioning and hardware lifecycle security.
• Strong proficiency with Puppet for fleet hardening in production.
• Strong understanding of network security concepts and protocols.
• Experience with hybrid identity integrated with cloud IAM (AD/LDAP).
• Experience with Infrastructure as Code (Terraform).
• Familiarity with container security implications (Kubernetes).
• Experience with regulatory compliance (GDPR, HIPAA, PCI DSS, NIST CSF).
• Located in SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office.

Responsibilities

• Design and implement secure bare-metal and private-cloud architectures (servers, storage, management).
• Harden OS baselines and firmware, patching, secure boot and measured boot.
• Secure network foundations: segmentation, DNS, PKI, NAC, IDS/IPS on real hardware.
• Manage hybrid connectivity between on-premises and cloud (VPN, Direct Connect, SD-WAN).
• Oversee AD/LDAP and cloud IAM integration for privileged access.
• Assist with security assessments and audits for physical and hybrid infra.
• Monitor and remediate to comply with PCI, NIST CSF, GDPR, HIPAA.

Skills

Infrastructure security

Private cloud security

Firmware security

Puppet configuration

Terraform

Python scripting

Kubernetes security

Ad/LDAP integration

Networking security

Regulatory compliance

Education

Bachelor's degree in Computer Science or related field

Tools

Puppet

Terraform

iDRAC/BMC

Kubernetes

GitHub Actions

Job description

SpaceXSI is seeking a hands-on Infrastructure Security Engineer to secure its bare-metal and private-cloud infrastructure from hardware to platform level. You will design, implement, and harden systems, ensuring secure foundations and platform security across data centers, colo, and hybrid environments.

You will collaborate with engineering to embed security into CI/CD and automate security controls using Puppet, Terraform, Python, and Kubernetes security practices.