Platform Security Engineer - Kubernetes & Serverless

FriendliAI Inc.; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Generous compensation

Daily meals

Flexible hours

Hardware support

Job summary

FriendliAI is seeking an experienced engineer to architect and build the security foundations of a multi-tenant serverless compute platform on Kubernetes. You will own the security design for both control plane and data plane, and ship guardrails as code.

Collaborating with Platform/SRE/Infra teams, you will implement secure-by-default developer experiences, design IAM and workload identity, and drive runtime detections and compliance evidence across the platform.

Qualifications

• 5+ years securing cloud-native platforms with a focus on distributed systems and multi-tenancy.
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
• Strong hands-on experience with AWS (IAM, VPC/networking, logging/monitoring, …) and Kubernetes/container security.
• Proficiency with Terraform and Helm.
• Experience building or operating runtime detections for containers/functions.
• Strong technical background in backend systems, cloud infrastructure, or AI tooling.

Responsibilities

• Design and implement the security architecture for a Kubernetes-based, multi-tenant serverless platform.
• Build guardrails as code using Terraform and Helm.
• Establish network segmentation and service-mesh policy.
• Develop secrets and key management patterns.
• Implement runtime detections for containerized workloads.
• Design and roll out IAM & workload identity management.
• Threat model new features and changes to the overall platform.
• Collaborate with engineering to debug production issues, lead post-incident hardening, and automate evidence for compliance controls.

Skills

Cloud security

Kubernetes security

AWS security

Terraform

Helm

Multi-tenant security

Education

Bachelor’s or Master’s degree in Computer Science/Engineering or equivalent

Tools

Terraform

Helm

Job description

FriendliAI is seeking an experienced engineer to architect and build the security foundations of a multi-tenant serverless compute platform on Kubernetes. You will own the security design for both control plane and data plane, and ship guardrails as code.

Collaborating with Platform/SRE/Infra teams, you will implement secure-by-default developer experiences, design IAM and workload identity, and drive runtime detections and compliance evidence across the platform.