Security & IT Engineer for AI Lab Ops

Compound Eye; Redwood City (CA); Hybrid; USD 150,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Annual home office stipend

ISO stock options

401(k) with match after 6 months

Flexible PTO and holidays

Job summary

Compound Eye seeks a Cybersecurity & IT Engineer to own identity, endpoint, network, and security practice for a hands-on, generalist role in engineering. You will fix friction, harden access, audit OAuth grants, and enable secure lab work for a mostly remote team.

You’ll partner with DevOps on AWS, GPUs, and the developer toolchain while applying NIST 800-171 and CMMC 2.0 practices. No security certification required.

Qualifications

• 5+ years in IT, systems administration, or security engineering, including time owning broad scope on a small team.
• Hands-on administration of both Microsoft 365 and Google Workspace.
• Strong Linux administration, plus working competence with Windows and macOS.
• Hands-on networking experience with firewalls, VPNs, managed switches, VLANs, routing.
• Practical experience with zero-trust/overlay networking (Cloudflare Tunnel, WireGuard, Tailscale, or similar).
• Ownership of DNS and email authentication for a production domain.
• Familiarity with NIST 800-171 and CMMC 2.0 sufficient to avoid creating compliance debt. No certification required.
• A track record of writing security practices that engineers actually adopt.
• Comfortable working independently and partnering with engineering teams without close oversight.

Responsibilities

• Build our internal security standard on top of NIST 800-171: Hardening guides, onboarding/offboarding, access reviews, incident response runbooks
• Run recurring access, logs, and configuration audits, and maintain evidence for our compliance contractor.
• Own identity across Entra ID, Intune, Microsoft 365 (Defender, Purview, GCC High), and Google Workspace.
• Own email authentication and DNS (SPF, DKIM, DMARC, MTA-STS) and manage zones/certificates across Cloudflare.
• Secure engineer and lab access via Cloudflare Tunnel/Zero Trust Mesh, VPN jump hosts, and SSH certificate authorities.
• Manage the device fleet (Windows, macOS, Linux, Android, iOS) and the physical network (firewalls, switches, VLANs, lab isolation).
• Define AI tooling guardrails for Claude Code and other agentic workflows.
• Keep documentation current and manage vendor relationships within budget.
• Manage hardware logistics from our Redwood City office, including shipping, returns, and spare equipment storage.

Skills

Identity management

Endpoint security

Network security

Zero trust

DNS & DMARC

Linux admin

Windows/macOS

Cloudflare Tunnel

Entra ID

Google Workspace

Microsoft 365

Tools

Cloudflare Tunnel

VPN

SSH certificates

Google Workspace

Microsoft 365

Job description

Compound Eye seeks a Cybersecurity & IT Engineer to own identity, endpoint, network, and security practice for a hands-on, generalist role in engineering. You will fix friction, harden access, audit OAuth grants, and enable secure lab work for a mostly remote team.

You’ll partner with DevOps on AWS, GPUs, and the developer toolchain while applying NIST 800-171 and CMMC 2.0 practices. No security certification required.