Infrastructure Security Engineer - Multi-Cloud & Kubernetes

The Material Group; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Comprehensive medical, dental, vision,

Life and disability insurance

Parental leave

Flexible PTO

Paid Holidays

Relocation support

Job summary

The Material Group is seeking a security-focused Infrastructure Engineer to own security across training and serving systems for frontier models. You will harden multi-cloud Kubernetes, design policy, protect the software supply chain, and manage identities and secrets across clusters.

You will build detection and response tooling, safeguard assets like model weights and data, and work across thousands of compute nodes.

Qualifications

• BS in CS, EE, or related field, or equivalent experience.
• Proficiency in Rust, Go, or Python.
• Strong Linux internals: namespaces, cgroups, seccomp, capabilities.
• Deep Kubernetes security: authz, admission control, workload isolation.
• Software supply chain security practices: SBOM, signing, attestation.
• Identity and secrets management.
• Experience protecting high-value assets (model weights, data, or equivalent).
• Track record in detection, response, and threat modeling.
• Multi-cloud experience: AWS, GCP, Azure, CoreWeave, Crusoe.

Responsibilities

• Audit and harden multi-cloud Kubernetes clusters.
• Design authorization, admission, and workload isolation policy.
• Secure the software supply chain from build to deploy.
• Manage identity and secrets across clusters and accelerators.
• Protect high-value assets including model weights and training data.
• Build detection and response tooling for clusters, workloads, and the fabric.

Skills

Rust

Go

Python

Linux internals

Kubernetes security

SBOM, signing, attestation

Identity and secrets management

Threat modeling

Multi-cloud (AWS, GCP, Azure)

Education

BS in CS, EE, or related field, or equivalent experience

Tools

Kubernetes

Job description

The Material Group is seeking a security-focused Infrastructure Engineer to own security across training and serving systems for frontier models. You will harden multi-cloud Kubernetes, design policy, protect the software supply chain, and manage identities and secrets across clusters.

You will build detection and response tooling, safeguard assets like model weights and data, and work across thousands of compute nodes.