Platform Security Engineer

Thinking Machines Lab; San Francisco (CA); On-site; USD 200,000 - 475,000; Full time

Benefits offered by this job

Health benefits

Unlimited PTO

Parental leave

Relocation support

Job summary

Thinking Machines Lab in San Francisco is seeking an infrastructure engineer to own and evolve the security backbone of our foundation models. You will secure compute, storage, networking, and data platforms, shaping controls and tooling so security is built in by default while enabling researchers and engineers to move fast.

You’ll design security patterns for Kubernetes, manage IAM and secrets, build secure data pipelines, review threat models with stakeholders, and automate guardrails through

Qualifications

• Bachelor’s degree or equivalent experience in engineering, or similar.
• Strong background with containers and orchestration (e.g., Kubernetes) and how to secure them (namespaces, network policies, pod security, admission controls, etc.)
• Practical experience with Infrastructure as Code (Terraform or similar), including secure patterns for provisioning networks, IAM, and shared services.
• Solid understanding of cloud networking and security: VPCs, load balancers, service discovery, mTLS, firewalls, and zero-trust-style architectures.
• Proficiency with a systems language such as Rust and scripting in Python for building platform components and internal tools.
• Evidence of owning complex, production-critical systems, including debugging issues that span infra, security, and application layers.

Responsibilities

• Architect security patterns for platforms and services, including network segmentation, service-to-service authentication, RBAC, and policy enforcement in Kubernetes and cloud environments.
• Manage identity, access, and secrets for humans and services: workload and cross-cloud identity, least-privilege IAM, and secrets management.
• Build secure platforms for data ingestion, processing, and curation: classification, encryption, access controls, and safe sharing patterns across teams.
• Write threat models and review designs with researchers and engineers to help them ship features and experiments in a safe, scalable way.
• Automate security checks and build guardrails: policy-as-code, secure infrastructure baselines, validation in CI/CD, and tools that make the secure path the easiest one.

Skills

Kubernetes

IAM / Secrets

Threat modeling

Python scripting

Rust

Infra as Code

Education

Bachelor’s degree or equivalent

Tools

Terraform

CI/CD tooling

Job description

Thinking Machines Lab in San Francisco is seeking an infrastructure engineer to own and evolve the security backbone of our foundation models. You will secure compute, storage, networking, and data platforms, shaping controls and tooling so security is built in by default while enabling researchers and engineers to move fast.

You’ll design security patterns for Kubernetes, manage IAM and secrets, build secure data pipelines, review threat models with stakeholders, and automate guardrails through