Sr. Security Engineer (Infrastructure)

Starlink; Bastrop (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

SpaceX is seeking a Sr. Security Engineer (Infrastructure) to join Information Security. You will design on-prem Kubernetes platforms, lead cluster lifecycle, build automation, and set standards for secure deployments while coordinating with IT and software teams.

The role requires extensive Kubernetes and Linux experience, strong automation skills, and a focus on security hardening and incident response. Onsite work is required; ITAR compliance applies.

Qualifications

• Bachelor's degree in CS or STEM or 2+ years of production infra experience; high school diploma with equivalent experience allowed.
• 5+ years operating on-prem Kubernetes in production environments.
• 5+ years Linux system administration and automation using Python, Go, or similar.

Responsibilities

• Design on-prem Kubernetes platforms for security services and related compute/storage/networking.
• Lead cluster lifecycle tasks including upgrades, capacity, failure domains and safe change.
• Build automation for provisioning, configuring and operating the platform.
• Set deployment standards for secure, hardened Kubernetes workloads.
• Harden clusters/workloads with RBAC, policy, secrets, and secure config.
• Respond to production incidents and drive durable fixes.
• Define signals, alerts and runbooks to keep platforms supportable.
• Document runs and advise other teams; ship platform changes to reduce risk.
• Deliver scalable, repeatable, maintainable, and secure solutions.

Skills

Kubernetes on-prem

Linux administration

Python or Go

Security engineering

Automation tooling

Education

Bachelor's degree in computer science or STEM

2+ years experience with production infrastructure (alt: high school diploma)

Tools

Terraform

Ansible

GitOps

Job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. SECURITY ENGINEER (INFRASTRUCTURE)

SpaceX is looking for a Sr. Security Engineer (Infrastructure) to join Information Security to help protect and drive the SpaceX mission. Information drives our business. We must protect the confidentiality, integrity, and availability of systems and processes across the enterprise, and defend against loss of control or confidence in our systems.

RESPONSIBILITIES:

• Design on-premises Kubernetes platforms that security services run on, and the compute, storage, and networking they depend on.
• Lead cluster lifecycle work, including upgrades, capacity, failure domains, and safe change.
• Build the automation other engineers use to provision, configure, and operate the platform.
• Set standards for how security services are deployed, hardened, and run on Kubernetes.
• Harden clusters and workloads, including RBAC, policy, secrets, and secure configuration.
• Respond to the hardest production incidents and drive them to a durable fix.
• Define the signals, alerts, and operational practices that keep the platform supportable.
• Document what you run, keep it working, and advise other teams on it.
• Find systemic gaps with security and IT, then ship platform and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, IT, software, and other partners.

BASIC QUALIFICATIONS:

• Bachelor's degree in computer science or another STEM discipline; OR 2+ years of professional experience operating production infrastructure and high school diploma or equivalency certificate in lieu of a degree.
• 5+ years of experience operating on-premises Kubernetes in a production environment.
• 5+ years of experience with Linux system administration and with Python, Go, or another language used to automate infrastructure.

PREFERRED SKILLS AND EXPERIENCE:

• Production Kubernetes at scale, including control plane, networking, storage, RBAC, and upgrades.
• Designing on-premises compute, storage, and network architectures for container platforms.
• Cluster and node hardening, admission control, and secure workload configuration.
• Infrastructure as code and configuration management.
• Python or Go for platform tooling and automation.
• Linux internals and troubleshooting.
• Observability, alerting, and operational readiness for production platforms.
• CI/CD or GitOps-style delivery onto Kubernetes.
• Capacity planning, failure domains, and recovery for on-premises platforms.
• TCP/IP at the level needed to build and debug cluster networking.
• Root-cause debugging under time pressure.

ADDITIONAL REQUIREMENTS:

• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite. Hybrid or remote work will not be considered.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s affirmative action plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [e-mail].