Infra Security Engineer: Bare Metal & Hybrid Cloud

Cybersecurity Jobs; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical/Vision/Dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Employee discounts and perks

Job summary

SpaceXAI in Palo Alto is seeking an hands-on Infrastructure Security Engineer to design, build, and secure physical and private-cloud infrastructure through the platform and application stack. The role covers BIOS/UEFI, firmware posture, and Kubernetes security in hybrid environments.

You will own security across on-prem and cloud, automate with IaC, and drive compliance with PCI, NIST CSF, GDPR, and HIPAA.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Hands-on experience securing bare-metal, data-center, or private-cloud environments (not cloud-only resumes).
• Experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security.
• Strong proficiency with Puppet for configuration management and fleet hardening in production.
• Experience with hybrid identity (AD/LDAP) integrated with cloud IAM.
• Experience with Infrastructure as Code (Terraform) on physical or VM fleets.
• Familiarity with Kubernetes security implications, including on-premises or bare-metal clusters.
• Proficiency in Python, Bash, and Golang for automation.
• Familiarity with GDPR, HIPAA, PCI DSS, NIST CSF.

Responsibilities

• Design and implement secure bare-metal and private-cloud architectures including servers, storage, and firmware posture.
• Harden physical and virtual fleets with OS baselines and CIS benchmarks.
• Manage firmware lifecycle security (BMC/iDRAC/iLO, PXE/Kickstart provisioning).
• Build and secure network foundations on real hardware and hybrid connectivity.
• Own security across on-premises and cloud, including VPNs and zero-trust patterns.
• Monitor and respond to security events; maintain PCI/NIST CSF/GDPR/HIPAA compliance.
• Develop IaC and configuration management with embedded security controls (Puppet, Terraform).
• Integrate security into CI/CD pipelines and code/image scanning platforms.
• Develop dashboards and alerts from security metrics across layers.

Skills

Infrastructure security

Bare-metal/private cloud security

Kubernetes security

Puppet

Terraform

Python

Golang

CI/CD security

Network security

Identity and access management

Hybrid cloud security

Education

Bachelor's degree

Tools

BMC/iDRAC/iLO

PXE/Kickstart

VMware/OpenStack/Proxmox

Prometheus/Grafana/CloudWatch

GitHub Actions

Job description

SpaceXAI in Palo Alto is seeking an hands-on Infrastructure Security Engineer to design, build, and secure physical and private-cloud infrastructure through the platform and application stack. The role covers BIOS/UEFI, firmware posture, and Kubernetes security in hybrid environments.

You will own security across on-prem and cloud, automate with IaC, and drive compliance with PCI, NIST CSF, GDPR, and HIPAA.