Infrastructure Security Engineer (Bare Metal & Platform)
Core
Design, implement, and harden physical and private-cloud infrastructure foundations (bare metal, servers, networks, identity, orchestration) and extend security posture to containers, automation, and hybrid cloud connectivity.
Role type
Senior IC Infrastructure Security Engineer (Bare Metal & Platform)
Builds
Secure bare-metal and private-cloud architectures, hardened physical/virtual fleets, network foundations, hybrid connectivity, container/Kubernetes standards, and security operations tooling.
Domain
Cybersecurity, Infrastructure Security, Cloud Security, Data Center Operations
Required skills
Bare-metal and private-cloud security, Firmware/BMC management, Network security (segmentation, firewalls, hybrid connectivity), Identity management (AD/LDAP, cloud IAM), Infrastructure as Code (Terraform, Puppet), Container/Kubernetes security, Python/Bash/Golang automation, Regulatory compliance (PCI, NIST, GDPR, HIPAA)
Preferred skills
Physical server fleet operations (VMware, OpenStack), Security certifications (CCSP, OSCP), Kubernetes on bare metal, Multi-cloud security, CI/CD tooling (GitHub Actions), Observability tooling (Prometheus, Grafana, SIEM), AI/ML workload security
Technologies
Linux, Windows, Kubernetes, Terraform, Puppet, Python, Bash, Golang, VMware, OpenStack, Prometheus, Grafana, Wazuh, GitHub Actions
Responsibilities
Design and implement secure bare-metal and private-cloud architectures; Harden physical and virtual fleets (OS baselines, patch management, secure boot); Build and secure network foundations (segmentation, PKI, NAC, IDS/IPS); Manage hybrid connectivity (VPN, Direct Connect, SD-WAN); Manage identities and privileged access (AD/LDAP, cloud IAM); Monitor and respond to security events across bare metal and hybrid cloud; Develop dashboards and alerts from security metrics; Own security projects end to end.
Seniority
Senior, hands-on IC