Infrastructure Security Engineer: Bare Metal & Private Cloud

Cybersecurity Jobs; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

401(k) retirement plan

Disability insurance

Life insurance

Other discounts and perks

Job summary

SpaceXSI is building and securing infrastructure from bare metal to platform and application workloads. This Infrastructure Security Engineer role is hands‑on and operational, focusing on hardening physical and private‑cloud foundations, enforcing security controls for containers and Kubernetes, and running detection and response across hybrid environments.

This position is based in Palo Alto, CA (onsite) and supports security programs across firmware posture, provisioning, and infrastructure

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 3–5 years of hands‑on infrastructure security experience.
• Proven experience securing bare‑metal, data‑center, or private‑cloud environments.

Responsibilities

• Design secure bare‑metal and private‑cloud architectures with firmware posture.
• Harden OS with CIS benchmarks, patching, and secure boot measures.
• Secure container and Kubernetes standards on bare metal and private cloud.
• Own hybrid connectivity including VPNs and direct connections.
• Manage identities across AD/LDAP and cloud IAM; federations and PAM.

Skills

Ownership

Critical thinking

Problem-solving

Collaboration

Education

Bachelor's degree in Computer Science, Cybersecurity

Tools

Puppet

Terraform

Kubernetes

CI/CD

Active Directory/LDAP

Job description

SpaceXSI is building and securing infrastructure from bare metal to platform and application workloads. This Infrastructure Security Engineer role is hands‑on and operational, focusing on hardening physical and private‑cloud foundations, enforcing security controls for containers and Kubernetes, and running detection and response across hybrid environments.

This position is based in Palo Alto, CA (onsite) and supports security programs across firmware posture, provisioning, and infrastructure