Infrastructure Security Engineer (Senior/Principal)

Positron; United States; Remote; USD 170,000 - 325,000; Full time

Benefits offered by this job

Fully company-paid medical, dental, &

Vision insurance

Remote-first culture with home office

Unlimited PTO

13 paid holidays

401(k) with company matching

Home office setup provided

Job summary

Positron AI is seeking a Senior/Principal Infrastructure Security Engineer to secure and manage the hybrid-cloud transition. You will own identity management, access control, IaC foundations, secrets, and core developer tooling used daily by hardware and software teams.

This is a hands-on, high-ownership role focusing on authentication foundations, secure provisioning, and threat detection across on‑prem and cloud environments, with a strong emphasis on Terraform/Ansible, Auth0, and PKI.

Qualifications

• Expertise in identity and access management including SSO and RBAC.
• Hands-on with Kubernetes and infrastructure as code (Terraform/Ansible).
• Production experience with cloud platforms (GCP preferred).
• Proven SIEM deployment and incident response experience.
• Experience with PKI, certificate management, and secrets handling.
• Ability to design secure network segmentation for hybrid environments.

Responsibilities

• Define, implement, and operate the IAM platform and RBAC across cloud and internal systems.
• Migrate on-prem workloads to a secure hybrid-cloud environment (GCP).
• Build and maintain IaC for developers using Terraform and Ansible.
• Design and enforce network segmentation between on-prem and cloud.
• Own secrets management and artifact storage security across environments.
• Select, deploy, and operate a SIEM; lead incident response and post-incident reviews.

Skills

IAM & RBAC

Kubernetes

Terraform

Ansible

Auth0

Okta

GCP

AWS/Azure

SIEM

PKI

Incident response

Secrets management

Network segmentation

Artifact storage

Tools

Auth0

Okta

Job description

Infrastructure Security Engineer (Senior/Principal)

Positron AI is building next-generation AI inference accelerators designed from the ground up for low-latency, high-throughput large language model inference. Chips built for the training era keep running into two walls at inference time: memory bandwidth and chip-to-chip networking. We designed our architecture to break through both. Our first-generation Atlas systems are already in production on Oracle Cloud Infrastructure. Asimov, our first custom ASIC, takes that architecture to silicon. In simulations, Asimov delivers several times more tokens per dollar and tokens per watt than leading GPUs, at a fraction of the power. Paired in our Titan system, Asimov is built to serve models beyond 16 trillion parameters. In September 2026, we raised $875 million at a $5 billion valuation. NEA led the round, joined by Atreides Management, Valor Equity Partners, and others, to bring Asimov and Titan to market. Our team includes engineers from Groq, Lambda, NVIDIA, Meta, F5, and many other industry leaders.

Role Overview

As Positron scales, our engineering environment is evolving from a primarily on-prem footprint to a hybrid-cloud model. We are looking for a Senior or Principal Infrastructure Security Engineer to secure and manage that transition. You will own identity and access management, cloud infrastructure for our developers, infrastructure as code, and the core developer tooling our hardware and software teams depend on every day. This is a hands-on, high-ownership role where you will define the foundations: how engineers authenticate, how infrastructure is provisioned and segmented, how secrets and artifacts are stored, and how we detect and respond to threats against our most critical systems.

Key Responsibilities

Identity and Access Management

• Define, implement, and operate our identity platform, including Auth0 and role-based access control (RBAC) across internal systems and cloud environments.
• Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities.
• Design and manage public key infrastructure (PKI), including certificate issuance, rotation, and revocation.
• Lead the migration of on-prem workloads to a secure hybrid-cloud environment on GCP.
• Build and maintain cloud infrastructure for developers using infrastructure as code with Terraform and Ansible.
• Design and enforce network segmentation between on-prem, cloud, and critical infrastructure environments.

Developer Tooling and Platform Security

• Deploy and maintain artifact storage and other core developer tooling with security built in from the start.
• Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely.

Detection and Response

• Select, deploy, and operate a SIEM solution covering our critical infrastructure.
• Build and lead incident response processes, from detection and triage through remediation and post-incident review.

Required Qualifications

• Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar.
• Experience with Kubernetes, including managed or proprietary Kubernetes distributions.
• Hands-on experience building and managing infrastructure as code with Terraform and Ansible.
• Production experience with GCP, or with Azure or AWS and a willingness to work in GCP.
• Proven experience deploying, tuning, and operating a SIEM solution.
• Experience with PKI, including certificate management and lifecycle automation.
• Demonstrated incident response experience, including leading investigations and remediation.
• Experience deploying and maintaining artifact storage and secrets management systems.
• Understanding of network segmentation and secure network design across on-prem and cloud environments.

Preferred Qualifications

• Broader security engineering experience beyond infrastructure, such as application or product security.
• Experience designing security architecture for organizations moving from on-prem to hybrid cloud.
• Familiarity with endpoint detection and response (EDR) tooling and deployment.

Leveling and Scope

While this role is currently posted at a specific level, we are a growth-oriented organization and are open to hiring at a more senior level for the right candidate. Please note that this job description serves as a focused but generalized overview of the role; specific responsibilities and impact expectations will be tailored to the experience and seniority of the final hire.

What Success Looks Like

In your first three to six months, you will have defined and stood up our identity foundation, with Auth0 and RBAC in place across key systems. Developers will be provisioning cloud infrastructure through infrastructure as code, and the migration from on-prem to hybrid cloud will be well underway on a secure, segmented footing. A SIEM solution will be live and monitoring our critical infrastructure, giving the team real visibility and a clear path to detect and respond to threats.

Why Join Us?

• Build the security and infrastructure foundations of a well-funded AI hardware company from the ground up, with the ownership to make lasting architectural decisions.
• Protect the systems behind next-generation inference silicon, working alongside hardware and software engineers on some of the most important infrastructure in AI.

The base salary range for this role is Senior: $170,000 – $250,000, Principal: $250,000 - $325,000.

Please note that the figures provided represent the base salary range only and do not include other elements of our total compensation package, equity, or comprehensive benefits.

At Positron AI, we value the unique expertise each candidate brings. While the range above reflects our typical expectation for the position, we reserve the flexibility to exceed this range for candidates whose specialized skills, significant experience, or unique qualifications fall outside the standard scope of the role. Final offers are determined based on a variety of factors, including internal equity, and individual impact.

We want you to do your best work and feel confident that you and your family are taken care of. That means comprehensive coverage, real time to rest, and support for your future.

Health and wellness

• Fully company-paid medical, dental, and vision insurance for you and your dependents
• Company-paid life and disability coverage, with voluntary options to add more
• Supplemental hospital, critical illness, and accident coverage available

Time off and flexibility

• Unlimited paid time off; we encourage everyone to truly unplug and recharge
• 13 paid company holidays
• Remote-first culture with a company-provided computer and home office setup

Compensation and future

• Competitive salary and equity
• 401(k) with company matching, eligible from day one

This position is open to candidates currently authorized to work in the U.S. We cannot provide new visa sponsorship for this role but are open to facilitating H-1B visa transfers for eligible candidates.

Equal Opportunity Employer. If you're excited about the role but don't meet every bullet, we'd still love to hear from you.