Lead Security & Infrastructure Engineer

Anodize; Los Altos, San Francisco (CA, CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Anodize is seeking a Lead Security & IT Engineer in California to own security posture and corporate infrastructure across our silicon design environment and employee devices.

You will automate identity, SaaS toolchains, and device enrollment with zero-trust principles while advising product teams on enterprise IT design for scalable, secure tech stacks in a fast-growing startup.

Qualifications

• 6+ years of experience spanning Infrastructure Security, DevSecOps, or Systems Engineering, ideally in fast-paced startup or high-growth tech environments.
• IaC & Automation First: Strong scripting or software development skills and hands-on experience using Infrastructure as Code (IaC) to build and manage security and IT infrastructure programmatically.
• Enterprise Identity & Zero Trust: Experience architecting enterprise Identity Providers, strict least-privilege access controls, and Zero Trust network architectures.
• Cloud & Network Security: Proven track record securing public cloud environments, with expertise in network segmentation, VPC isolation, egress control, and robust encryption standards.
• Fleet Management & Endpoint Security: Hands-on experience administering multi-OS environments (macOS, Linux, Windows) using modern MDM and EDR solutions to enforce security without sacrificing engineering velocity.

Responsibilities

• Automate Corporate IT and scale identity provision, SaaS toolchain, and lifecycle workflows with zero-touch automation.
• Secure Silicon & Vendor IP Infra by enforcing network isolation and strict access controls in the cloud-based silicon design environment.
• Secure the Fleet by using lightweight, effective tools to protect Windows/macOS/Linux across the organization.
• Consult on Product MDM to help design native, secure enterprise management and enrollment features for our device.

Skills

Infrastructure Security

DevSecOps

Systems Engineering

Zero Trust

IAM / Identity

IaC

Scripting

Cloud Security

Endpoint Security

MDM/EDR

Tools

MDM

EDR

Zero Trust tooling

Job description

We’re a well‑funded, stealth startup building a new end‑to‑end personal computing platform.

As our Lead Security & IT Engineer, your responsibility is to build a high‑performance, automated, and seamless corporate environment. You will have complete ownership of both our internal security posture and corporate infrastructure, across our custom silicon design environment, internal infrastructure, and employee endpoints. Your goal is to keep us secure by default through automation, code, and zero‑trust principles, rather than manual policies and ticket queues.

Additionally, you will have the opportunity to act as an internal security consultant for our product team, helping them design our products to be manageable by modern enterprise IT organizations.

Responsibilities

• Automate Corporate IT: Treat IT like an engineering discipline. Build and scale our identity provider, SaaS toolchain, and lifecycle workflows through zero‑touch automation. No manual ticket queues.
• Secure Silicon & Vendor IP Infra: Design and enforce network isolation and strict access controls for our cloud‑based silicon design environment. Protect highly confidential, encrypted third‑party IP during the design and tape‑out phases.
• Secure the Fleet: Build and secure our internal fleet (Windows/macOS/Linux) using light‑touch, high‑efficacy tools that keep our company secure without killing battery life.
• Consult on Product MDM: Act as a technical advisor to our product team. Help them build native, secure enterprise management and MDM enrollment features into our commercial device, drawing from your hands‑on experience as an IT customer.
• 6+ years of experience spanning Infrastructure Security, DevSecOps, or Systems Engineering, ideally in fast‑paced startup or high‑growth tech environments.
• IaC & Automation First: Strong scripting or software development skills and hands‑on experience using Infrastructure as Code (IaC) to build and manage security and IT infrastructure programmatically.
• Enterprise Identity & Zero Trust: Experience architecting enterprise Identity Providers, strict least‑privilege access controls, and Zero Trust network architectures.
• Cloud & Network Security: Proven track record securing public cloud environments, with expertise in network segmentation, VPC isolation, egress control, and robust encryption standards.
• Fleet Management & Endpoint Security: Hands‑on experience administering multi‑OS environments (macOS, Linux, Windows) using modern MDM and EDR solutions to enforce security without sacrificing engineering velocity.

Preferred Qualifications

• Experience securing cloud‑based silicon design (EDA) environments, high‑performance computing (HPC) workloads, or high‑value third‑party IP during chip development cycles.
• Familiarity with enterprise device enrollment standards and hardware‑level security concepts.