Information Security Engineer, Bare Metal
Core
End-to-end security for a bare metal fleet supporting frontier AI compute, covering supply chain, provisioning, hardening, operations, and decommissioning.
Role type
Senior IC Information Security Engineer (Bare Metal)
Builds
Hardened golden OS images, BMC security models, fleet-scale encryption/key management, and automation for secure-by-default infrastructure.
Domain
AI Infrastructure / Hardware Security / Bare Metal
Deliverable
production ML models | infrastructure
Required skills
Linux hardening (SELinux, AppArmor, kernel security), network security (TCP/IP, firewalls, zero-trust), encryption (LUKS, HSM, TPM/TXT), automation (Python, Go, Rust, Ansible, Puppet, Chef), threat modeling, incident response.
Preferred skills
BMC platforms (OpenBMC, iDRAC, iLO), hardware root of trust, secure boot, compliance (SOC 2, ISO 27001, FedRAMP), CISSP, OSCP, CEH.
Technologies
Linux, SELinux, AppArmor, Python, Go, Rust, Ansible, Puppet, Chef, LUKS, HSM, TPM, OpenBMC, iDRAC, iLO
Responsibilities
Own end-to-end security for every server in the bare metal fleet; design and maintain hardened golden OS images with automated vulnerability scanning; define and enforce the BMC security model; partner with network engineering on micro-segmentation and zero-trust; implement data-at-rest encryption and key management at fleet scale; lead threat modeling and respond to incidents touching the physical fleet.
Seniority
Senior, hands-on IC
