Infrastructure Engineer, Security
Thinking Machines Lab5 days ago
Base Salary
$200k - $475k/yr
Responsibilities
- Architect security patterns for platforms and services, including network segmentation, service-to-service authentication, RBAC, and policy enforcement in Kubernetes and cloud environments.
- Manage human and service identity, access, least-privilege IAM, workload and cross-cloud identity, and secrets management.
- Build secure data ingestion, processing, and curation platforms with classification, encryption, access controls, and safe sharing patterns.
- Create threat models and review designs with researchers and engineers to support safe, scalable features and experiments.
- Automate security checks and build guardrails through policy-as-code, secure infrastructure baselines, CI/CD validation, and internal tooling.
Requirements
- Bachelor’s degree or equivalent experience in engineering or a similar field.
- Strong experience securing containers and orchestration platforms, including Kubernetes namespaces, network policies, pod security, and admission controls.
- Practical Infrastructure as Code experience with Terraform or a similar tool for provisioning secure networks, IAM, and shared services.
- Solid understanding of cloud networking and security, including VPCs, load balancers, service discovery, mTLS, firewalls, and zero-trust-style architectures.
- Proficiency in a systems language such as Rust and scripting in Python.
- Experience owning complex, production-critical systems and debugging issues across infrastructure, security, and application layers.
- Preferred qualifications include experience with ML infrastructure, GPU clusters, large-scale training environments, AI labs, HPC environments, high-throughput system performance tuning, infrastructure security or distributed systems publications, relevant open-source contributions, and securing GPUs or TPUs in training and inference pipelines.
Benefits
- Health, dental, and vision benefits.
- Unlimited PTO.
- Paid parental leave.
- Relocation support as needed.
- Based in San Francisco, California; visa sponsorship is available.
- This is an evergreen role reviewed on an ongoing basis rather than a single immediate opening.