Member of Technical Staff - Infrastructure Security

aijoblist; San Francisco (CA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Top-tier compensation

Comprehensive medical, dental, vision insurance

Fully paid parental leave

Paid time off

Lunch and dinner provided daily

Job summary

B Capital in San Francisco is seeking a Member of Technical Staff - Infrastructure Security to ensure the security of multi-cloud Kubernetes environments. Candidates should have deep experience in securing Kubernetes, experience with CI/CD systems, and proficiency in Python or Golang. The position offers top-tier compensation, comprehensive health insurance, and paid parental leave among other benefits. Join a small, talent-dense team at B Capital to help define the future of open foundational models.

Qualifications

• Deep experience securing Kubernetes clusters and hardening containerized workloads.
• Understanding of managed Kube cluster services such as GKE.
• Recent hands-on engineering experience.

Responsibilities

• Audit and harden geographically disparate multi-cloud Kubernetes clusters.
• Automate monitoring and benchmarking of Kube cluster security posture.
• Design and implement centralized Kubernetes authorization policy enforcement.

Skills

Securing Kubernetes clusters

CI/CD systems such as ArgoCD

Infrastructure as Code systems

Coding with Python or Golang

Cloud providers such as GCP, AWS, Azure

Hardening containerized workloads

Job description

Location

San Francisco

Employment Type

Full time

Location Type

On-site

Department

Engineering

Our Mission

Reflection’s mission is to build open superintelligence and make it accessible to all.

We’re developing open weight models for individuals, agents, enterprises, and even nation states. Our team of AI researchers and company builders come from DeepMind, OpenAI, Google Brain, Meta, Character.AI, Anthropic and beyond.

Role Overview

Reflection.AI is looking for a Member of Technical Staff - Infrastructure Security to secure our geographically diverse multi-cloud Kubernetes and cloud environments. In this role, you’ll be expected to jump head first into the hands‑on engineering work of building infrastructure security controls from the ground up, outline a long term infrastructure security vision that ensures the security and integrity of our core technology, and define the roadmap that will fulfill your vision.

Key Responsibilities

• Audit and harden geographically disparate multi-cloud Kubernetes clusters
• Unify and harden authentication across Kubernetes clusters
• Design and implement centralized, auditable Kubernetes authorization policy enforcement
• Automate monitoring and benchmarking of Kube cluster security posture
• Develop defense‑in‑depth security boundaries around containerized workloads in Kubernetes clusters
• Build and deploy automated tooling to support incident detection & response for Kubernetes clusters and containerized workloads

Required Qualifications

• Deep experience securing Kubernetes clusters and hardening containerized workloads
• Understanding of managed Kube cluster services such as GKE
• Comfort working with CI/CD systems such as ArgoCD
• Familiarity with Kubernetes orchestration systems such as Rancher and Helm
• Experience hardening artifact repositories to ensure secure build artifact provenance spanning image builds, storage, and deployment
• Comfort defining and implementing concrete security improvements based on nebulous or unclear security requirements
• Experience working with infrastructure‑as‑code systems such as Terraform or Pulumi
• Experience working with major cloud providers such as GCP, AWS, and/or Azure
• Experience working with neocloud GPU providers such as VoltagePark, GMI Cloud, Crusoe, Anyscale, Together.ai, etc.
• Experience coding with Python or Golang
• Recent hands‑on engineering experience
• Proven track record of building infrastructure security controls from 0 to 1

What We Offer:

We believe that to build superintelligence that is truly open, you need to start at the foundation. Joining Reflection means building from the ground up as part of a small talent‑dense team. You will help define our future as a company, and help define the frontier of open foundational models.

We want you to do the most impactful work of your career with the confidence that you and the people you care about most are supported.

• Top‑tier compensation: Salary and equity structured to recognize and retain the best talent globally.
• Health & wellness: Comprehensive medical, dental, vision, life, and disability insurance.
• Life & family: Fully paid parental leave for all new parents, including adoptive and surrogate journeys. Financial support for family planning.
• Benefits & balance: paid time off when you need it, relocation support, and more perks that optimize your time.
• Opportunities to connect with teammates: lunch and dinner are provided daily. We have regular off‑sites and team celebrations.