Bare-Metal Security Engineer for AI Compute

Fluidstack; New York (NY); On-site; USD 150,000 - 230,000; Full time

Job summary

Fluidstack is seeking a Senior Security Engineer to own end-to-end security for our bare-metal fleet and core infrastructure. You will design hardened OS images, implement encryption and key management, and drive zero-trust network and firmware integrity across global data centers.

You will collaborate with hardware and software teams, lead threat modeling, and respond to security incidents. A deep Linux security background and automation skills are essential.

Qualifications

• Worked in information security or infrastructure engineering with a focus on bare metal, IaaS, or high-scale cloud infrastructure.
• Hardens Linux deeply (SELinux, AppArmor, kernel security) and manages network security (TCP/IP, VPNs, firewalls).
• Implements encryption in practice (disk-level and hardware-level) and understands HSMs/TXT/TPM.
• Automates fluently in Python, Go, or Rust with configuration management (Ansible, Puppet, Chef).
• Communicates security decisions clearly across engineering teams.

Responsibilities

• Own end-to-end security for every server in the bare metal fleet, from supply chain through decommissioning.
• Design and maintain hardened OS images with automated vulnerability scanning and patch pipelines.
• Define and enforce the BMC security model for top-of-rack surfaces and firmware integrity.
• Partner with network engineering on micro-segmentation, IDS/IPS, and firewall architecture with zero-trust principles.
• Implement data-at-rest encryption and key management at fleet scale; build secure-by-default automation.
• Lead threat modeling and security reviews for new hardware platforms and respond to incidents.

Skills

Bare metal security

IaaS

High-scale cloud

Linux hardening

Encryption

Python/Go/Rust

Automation tools

Tools

OpenBMC

iDRAC

iLO

Job description

Fluidstack is seeking a Senior Security Engineer to own end-to-end security for our bare-metal fleet and core infrastructure. You will design hardened OS images, implement encryption and key management, and drive zero-trust network and firmware integrity across global data centers.

You will collaborate with hardware and software teams, lead threat modeling, and respond to security incidents. A deep Linux security background and automation skills are essential.