Lead Security Architect for AI Infrastructure

Crux AI; Palo Alto (CA); Hybrid; USD 180,000 - 250,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

401(k) Plan with company match

Hybrid schedule

Job summary

Crux AI in Palo Alto, CA is building the first security architecture for its integrated AI infrastructure. You will be the first security engineer and own security controls from hardware root of trust to tenant boundaries, shaping the product's security posture for sensitive workloads.

Reporting to the CTPO, you will drive multi-tenant isolation, secure boot, attestation, and compliance evidence, partnering with data center and hardware teams to scale security across future TPU clusters and data

Qualifications

• 12+ years in security engineering, with deep focus on infrastructure, cloud, or platform security at scale.
• Hands‑on experience securing bare metal and data center infrastructure, including hardware root of trust, TPMs, secure and measured boot, BMC hardening, and out‑of‑band management networks.
• A track record of designing multi‑tenant isolation and identity and access architectures for a cloud or hyperscale platform, and shipping them to production.

Responsibilities

• Define the security architecture of record across the stack: hardware and firmware, bare metal hosts, out-of-band management, cluster fabric, control plane, and customer access.
• Build tenant isolation that dedicated and sovereign customers can verify, including network segmentation, secure provisioning and wipe between tenants, and attestation of what is running on their capacity.
• Secure the hardware supply chain and boot path with Google and our suppliers: secure and measured boot, BMC hardening, firmware integrity, and key management.
• Design how customer model weights and data are protected at rest, in transit, and in use, and how access to them is controlled and audited.
• Work with Data Center Engineering and Facility Operations so that physical security, access control, and network security are designed together at every site.
• Stand up threat modeling, security design review, detection, and incident response for the platform, and automate them so they scale with the fleet.
• Turn customer and regulatory requirements, such as FedRAMP, SOC 2, ISO 27001, and sovereign data residency, into concrete controls and the evidence that proves them.

Skills

Security engineering

Infrastructure security

Hardware root of trust

Tenant isolation design

Tools

TPMs

BMC hardening

Out‑of‑band management

Job description

Crux AI in Palo Alto, CA is building the first security architecture for its integrated AI infrastructure. You will be the first security engineer and own security controls from hardware root of trust to tenant boundaries, shaping the product's security posture for sensitive workloads.

Reporting to the CTPO, you will drive multi-tenant isolation, secure boot, attestation, and compliance evidence, partnering with data center and hardware teams to scale security across future TPU clusters and data