Loading...
LeadFull-timePythonRustRailsAWSGCPKubernetesTerraformMicroservicesCI/CDGo
Salary Range
$153,000 - $207,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
Crusoe is seeking an Infrastructure Security Engineer to secure the foundations of Crusoe Cloud, their purpose-built compute platform for AI and high-performance workloads. This role focuses on designing and embedding security controls directly into global infrastructure, enabling customers to train advanced models within a trusted, secure-by-default environment.
Key Responsibilities
- →Architect security controls across compute, networking, and storage layers of a global cloud platform
- →Champion Infrastructure-as-Code (IaC) standards (e.g., Terraform) to enforce secure defaults, immutability, and drift detection
- →Build automated security guardrails embedded directly into CI/CD and deployment pipelines
- →Collaborate on a centralized Vault-as-a-Platform service to manage secrets, encryption keys, and internal PKI
- →Design and operate certificate lifecycles (X.509, SSH) to support secure machine-to-machine trust
- →Drive adoption of short-lived, Just-In-Time (JIT) access models to reduce standing privileges and improve auditability
- →Secure core network foundations, including global DNS architecture, service discovery, and network authentication systems
- →Design and maintain authentication controls for network infrastructure to ensure secure, monitored access
- →Partner with infrastructure, platform, and SRE teams to identify and remediate security gaps in foundational systems
Requirements
- ✓8+ years of hands-on experience in infrastructure engineering, SRE, or security engineering
- ✓Deep understanding of security principles across the stack, from Linux and container runtimes to cloud control planes
- ✓Proven experience using Infrastructure-as-Code (Terraform) to manage complex, multi-environment infrastructure at scale
- ✓Strong knowledge of cryptography, secrets management, PKI, and modern authentication standards
- ✓Experience securing public cloud (AWS, GCP) and/or bare-metal environments
- ✓Strong networking fundamentals, including routing, segmentation, firewalls, and Zero Trust architectures
- ✓Hands-on experience with Kubernetes and container security, including secure secrets injection into microservices
- ✓Fluency in at least one programming language (Go or Python preferred) for automation and tooling
Free to sign up. Takes 30 seconds.
