Principal Security Engineer - AI Infra & Tenant Isolation

Crux AI; Iowa; Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Generous base and bonus

Health, dental, and vision coverage

Life insurance and disability

401(k) Plan with 4% company match

Hybrid schedule: 4 days in-office + 1远

Job summary

Crux AI seeks an experienced Security Engineer to architect and protect its integrated AI infrastructure. You will lead the security design for TPU clusters, data centers, network, and control plane, delivering verifiable tenant isolation and attestation for sovereign customers.

You’ll own threat modeling, incident response, and evidence-driven controls, partnering with Google and suppliers to ensure secure boot, hardware root of trust, and secure data handling at rest, in transit, and in use.

Qualifications

• 12+ years in security engineering, with deep focus on infrastructure, cloud, or platform security at scale.
• Hands-on experience securing bare metal and data center infrastructure, including hardware root of trust, TPMs, secure and measured boot, BMC hardening, and out-of-band management networks.
• A track record of designing multi-tenant isolation and identity and access architectures for a cloud or hyperscale platform, and shipping them to production.

Responsibilities

• Define the security architecture of record across the stack: hardware and firmware, bare metal hosts, out-of-band management, cluster fabric, control plane, and customer access.
• Build tenant isolation that dedicated and sovereign customers can verify, including network segmentation, secure provisioning and wipe between tenants, and attestation of what is running on their capacity.
• Secure the hardware supply chain and boot path with Google and our suppliers: secure and measured boot, BMC hardening, firmware integrity, and key management.
• Design how customer model weights and data are protected at rest, in transit, and in use, and how access to them is controlled and audited.
• Work with Data Center Engineering and Facility Operations so that physical security, access control, and network security are designed together at every site.
• Stand up threat modeling, security design review, detection, and incident response for the platform, and automate them so they scale with the fleet.
• Turn customer and regulatory requirements, such as FedRAMP, SOC 2, ISO 27001, and sovereign data residency, into concrete controls and the evidence that proves them.

Skills

Security engineering

Infrastructure security

Cloud security

Multi-tenant isolation

Tools

TPMs

Secure boot

BMC hardening

Out-of-band management

Job description

Crux AI seeks an experienced Security Engineer to architect and protect its integrated AI infrastructure. You will lead the security design for TPU clusters, data centers, network, and control plane, delivering verifiable tenant isolation and attestation for sovereign customers.

You’ll own threat modeling, incident response, and evidence-driven controls, partnering with Google and suppliers to ensure secure boot, hardware root of trust, and secure data handling at rest, in transit, and in use.