4 days ago
Base Salary
$341k - $402k/yr
Responsibilities
- Set technical direction and own architecture for platform security capabilities across identity, authorization, infrastructure security, encryption, key management, and auditability.
- Design and build authentication, federation, authorization, workload identity, lifecycle provisioning, and administrative access systems.
- Build Kubernetes and distributed-infrastructure security using software, policies, automation, APIs, controllers, Infrastructure-as-Code, and GitOps.
- Architect isolation and security controls for multi-tenant compute, network, storage, and control-plane systems.
- Own secure infrastructure provisioning, secrets and credential management, encryption, and certificate lifecycle security.
- Build production software and automation that make secure infrastructure patterns reliable, scalable, and easy for engineering teams to adopt.
- Lead security-sensitive platform designs and communicate architecture, tradeoffs, risk, and technical standards across engineering and security teams.
- Translate security and compliance requirements into automated evidence and production-ready controls.
Requirements
- 6+ years of software engineering experience building complex infrastructure or distributed systems, with deep experience in cloud and platform security, identity and access, Kubernetes, or related infrastructure security domains.
- Demonstrated experience setting technical direction and owning complex security architecture across multiple systems, teams, or infrastructure domains.
- Deep experience with OIDC, SAML, SCIM, RBAC, workload identity, short-lived credentials, and multi-factor authentication.
- Deep experience designing multi-tenant security and isolation across network, compute, storage, and control-plane boundaries.
- Hands-on Kubernetes security expertise including RBAC, admission control, service-account and workload identity, secrets and encryption, policy enforcement, and node security.
- Strong understanding of secrets management, encryption, key management, certificate lifecycle, and secure credential management.
- Strong software engineering skills in Go, Python, or similar languages, with experience designing, building, and operating production systems.
- Experience using APIs, controllers, automation, policy, Infrastructure-as-Code, GitOps, or similar software-first security approaches.
- Experience leading ambiguous cross-functional technical initiatives and influencing engineering direction across teams.
- Valuable experience includes building identity, key-management, network security, or infrastructure security capabilities for cloud platforms; securing high-performance storage and distributed infrastructure; automating compliance evidence; and building Kubernetes operators or admission webhooks.
Benefits
- U.S. total cash salary range of $341,400-$401,600, inclusive of potential bonus value, with placement based on location, experience, skills, and internal compensation standards.
- Long-Term Incentive Program and a robust suite of employee benefits.
- Hiring is prioritized in or near the San Francisco Bay Area, New York City, and Dallas.
- Candidates for the U.S. posting must qualify as U.S. Persons for export-control purposes or be eligible for an applicable export license.
Tech Stack
Categories
About Groq
Groq designs and operates AI inference hardware and cloud services built around its LPU architecture, aimed at developers and enterprises running large language models and other ML workloads. It generates revenue by selling processors and offering pay-as-you-go inference through its hosted platform and APIs. Founded in 2016 and headquartered in Mountain View, California, the company is privately held.