Platform Engineer

Fluidstack; United States; Remote; USD 130,000 - 210,000; Full time

Job summary

Fluidstack is seeking a Security Engineer to build and own the infrastructure-as-code security stack across campuses, automating remediation and patch pipelines to scale with growth. You will manage CI/CD for the security platform, ensuring changes are tested and reversible and that automation preempts on-call incidents.

Role emphasizes production-grade coding, tooling for non-engineers, and advanced automation across Windows and Linux fleets using Terraform, Ansible, and related tools.

Qualifications

• Built infrastructure as code that others deploy from, with pipelines creating repeatable, scalable systems.
• Automated work previously done manually, eliminating repeat tasks.
• Owned CI/CD for infrastructure, including change control and rollback strategies.
• Automated Windows fleets where tooling is thinner and environment is diverse.
• Maintained an on-call rotation that remains manageable through automation.
• Wrote production-grade code and reviewed others' code for reliability and security.
• Built tooling for non-engineers to use without workarounds.
• Bonus: familiarity with Terraform, Ansible, PowerShell DSC; CI/CD for infra (GitHub Actions, GitLab CI); Windows package/patch automation; observability and security platforms.

Responsibilities

• Build the infrastructure-as-code layer that boots a site's security platform end-to-end.
• Own the CI/CD and release path for the security stack to ensure tested, versioned, and reversible changes.
• Automate remediation tasks to avoid manual interventions.
• Develop package and patch pipelines to keep fleets current without manual touch.
• Pre-position automation ahead of the platform to keep on-call loads manageable.

Skills

Infrastructure as Code

CI/CD for infrastructure

Windows automation

Production code

Observability tooling

On-call management

End-to-end platform ownership

Tools

Terraform

Ansible

PowerShell DSC

GitHub Actions

GitLab CI

Chocolatey

WSUS

Intune

Prometheus

Grafana

Genetec Security Center

Job description

About Fluidstack

We exist to make humanity more free. For most of human history, you farmed or you starved. Technology gave people more time for the things they wanted to do, instead of things they had to do. Powerful AI will be the biggest lever for human choice we've ever built - but only if models are aligned with what humanity actually wants. There are groups building AI who don't share these goals. Whoever deploys frontier compute infrastructure fastest will decide whether AI expands human freedom or shrinks it.

We're singularly focused on delivering 10 to 100s of GWs of compute faster than anyone else, rethinking every layer of the stack. We acquire power, design and build data centers, and operate them - with teams spanning hardware and software. Speed and scale are our key differentiators. Come be a part of building civilization-scale infrastructure for AI.

How We Operate

• Be a barrel. Full autonomy. Own things end to end, take on scope without being asked, no permission required to operate outside your core role.

• Insane urgency. We drive everything forward as fast as possible.

• Reason from first principles. Challenge every assumption. Zero analogy thinking, no egos, the best idea wins.

• Love of the game. The frontier of AI is the most interesting problem of our time. We put in long hours at high intensity to push the frontier forward.

• Build something that actually matters. If you're going to spend your time, spend it on something that matters to the world.

The Security Team

Examples of key problems the team is working on

• You're securing the frontier of AI. The model weights training on our infrastructure are the most valuable and most targeted artifacts in technology, and we're standing up the compute to hold them faster than anyone ever has. A breach isn't a leak, it's the frontier walking out the door.

• Build the entire security program from scratch. Most leaders inherit someone else's system and spend a career patching it. Here you own it end to end, bare metal to boardroom, as we scale across continents.

• The industry's playbook was written for one building at a time. Vendor-managed appliances, manual process, and standards that assume a security team walks the floor. None of that survives contact with what we're building, so we build what should exist rather than buying what does.

• Your threat surface is measured in gigawatts. The customers running on our infrastructure are building the most consequential technology in human history, and being responsible for the physical and logical security of that work makes everything else feel small.

Role Scope

• Build the infrastructure as code that stands up a site's entire security platform, so bringing on a campus is a pipeline run rather than a project.

• Own CI/CD and the release path for the security stack, so every change reaches production tested, versioned, and reversible.

• Automate the remediation the team would otherwise do by hand, and hold the line that anything done twice becomes code.

• Build the package and patch pipeline that keeps a growing fleet current without a person touching a single host.

• Get the automation in place ahead of the platform it serves, so on-call stays something a small team can carry as campuses multiply.

What We're Looking For

The below is a starting point. We always make space for exceptional people, so if you don't fit this role exactly,

• You've built infrastructure as code that other people deploy from, and the systems that exist because your pipeline created them outnumber the ones someone built by following a runbook.

• You've automated yourself out of work you used to do by hand, and you can name what the team stopped doing as a result.

• You've owned CI/CD for infrastructure rather than applications, including how a bad change gets caught and rolled back.

• You've automated Windows fleets, where the tooling is thinner and the ecosystem less forgiving than it is on Linux.

• You've kept an on-call rotation survivable by removing causes rather than by writing more runbooks.

• You write production code and you review other people's.

• You've built tooling for people who aren't engineers, and they actually use it instead of working around it.

• Bonus: Infrastructure as code (Terraform, Ansible, PowerShell DSC). CI/CD for infrastructure (GitHub Actions, GitLab CI). Windows package and patch automation (Chocolatey, WSUS, Intune). Observability and alerting (Prometheus, Grafana). Physical security or building systems platforms (Genetec Security Center, access control, IoT device fleets).

We are committed to pay equity and transparency.

Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

Applicant Privacy Notice
AI Screening Notice
Ashby Bias Audit