Security Engineer (Infrastructure)

Starlink; Bastrop (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

SpaceX is seeking an Infrastructure Security Engineer to design, build, and operate on-prem Kubernetes clusters and security services, protecting the confidentiality, integrity, and availability of SpaceX systems. You will automate deployments, harden workloads, respond to incidents, and coordinate with information security, IT, and software teams to reduce risk.

This on-site role requires ITAR awareness and a strong background in Linux, Python/Go, and infrastructure as code.

Qualifications

• Bachelor’s degree or 2+ years of production infra experience.
• Experience operating on-prem Kubernetes in production.
• Proficient in Linux administration and scripting (Python/Go).

Responsibilities

• Design, build, and operate on-prem Kubernetes clusters for security services.
• Automate cluster deployment, configuration, upgrades, and maintenance.
• Run compute, storage, and networking for clusters.
• Harden clusters and workloads with RBAC, policies, and secrets.
• Respond to production incidents and drive fixes.
• Instrument and monitor clusters to prevent outages.
• Document operations and advise other teams.
• Collaborate with InfoSec, IT, and software teams to reduce risk.
• Deliver scalable, repeatable, secure platform solutions.

Skills

Kubernetes

Linux administration

Python

Go

Incident response

Security best practices

Education

Bachelor's degree in CS or STEM

2+ years in production infrastructure

Tools

Infrastructure as code

Job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SECURITY ENGINEER (INFRASTRUCTURE)

SpaceX is looking for a Security Engineer (Infrastructure) to join Information Security to help protect and drive the SpaceX mission. Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems.

RESPONSIBILITIES:

• Design, build, and operate on-premises Kubernetes clusters that security services run on.
• Automate cluster build-out, configuration, upgrades, and day-to-day operations.
• Run the compute, storage, and networking those clusters depend on.
• Keep platform services reliable, including scheduling, ingress, load balancing, and storage.
• Harden clusters and workloads, including RBAC, policy, secrets, and secure configuration.
• Respond to production incidents and drive them to a fix.
• Instrument clusters and workloads so failures are visible before they become outages.
• Document what you run, keep it working, and advise other teams on it.
• Find threats and gaps with security and IT, then ship platform and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, IT, software, and other partners.

BASIC QUALIFICATIONS:

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience operating production infrastructure and high school diploma or equivalency certificate in lieu of a degree.
• Experience operating on-premises Kubernetes in a production environment.
• Experience with Linux system administration and with Python, Go, or another language used to automate infrastructure.

PREFERRED SKILLS AND EXPERIENCE:

• Production Kubernetes operations, including control plane, workloads, networking, storage, RBAC, and upgrades.
• On-premises compute, storage, and networking for container platforms.
• Cluster and node hardening, admission control, and secure workload configuration.
• Infrastructure as code and configuration management.
• Linux troubleshooting.
• Observability with metrics, logs, and alerting.
• CI/CD or GitOps-style delivery onto Kubernetes.
• Backup, restore, and recovery for on-premises platforms.
• TCP/IP at the level needed to build and debug cluster networking.
• Root-cause debugging under time pressure.

ADDITIONAL REQUIREMENTS:

• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite. Hybrid or remote work will not be considered.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [e-mail].