Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Infrastructure Security Engineer

Home > Python programming jobs

Infrastructure Security Engineer in USA

  • Remote

Responsibilities

  • Design and ship Kubernetes security controls covering admission policy, RBAC, workload identity, network policy, and runtime hardening.
  • Harden the software supply chain through package firewalling, artifact signing and provenance, and admission enforcement.
  • Own cloud IAM and identity architecture, including least-privilege roles, short-lived credentials, and workload federation.
  • Secure research infrastructure, training pipelines, model weights, and datasets.
  • Threat model platform components and convert findings into actionable requirements.
  • Build guardrails for AI agents and developer tooling operating inside the infrastructure.
  • Write infrastructure as code and policy as code and ship security changes through standard review and rollout processes.
  • Support incident response with infrastructure analysis and containment guidance.

Requirements

  • Hands-on production experience securing Kubernetes, including admission policies, RBAC, workload identity, and cluster compromise scenarios.
  • Working knowledge of cloud IAM and networking, including identity federation and short-lived credentials, on at least one major cloud platform.
  • Experience with infrastructure as code and GitOps-style deployment.
  • Ability to write Python, TypeScript, Rust, or another programming language for engineering tooling.
  • Understanding of software supply-chain attacks and controls including signing, provenance, SBOMs, and admission enforcement.
  • Strong technical writing skills for design documents, threat models, and engineering explanations.
  • Sound judgment in selecting, enforcing, and safely rolling out security controls.
  • Preferred experience securing GPU or HPC-style compute, training pipelines, or research environments.
  • Preferred experience with policy engines and admission controllers such as Kyverno, OPA Gatekeeper, or Falco.
  • Preferred experience with multi-tenant cloud isolation, ABAC, scoped credentials, and per-tenant boundaries.
  • Preferred experience producing security architecture evidence for SOC 2, ISO 27001, or other audits and customer assessments.
  • Open-source contributions or published work in cloud or Kubernetes security are a plus.

Benefits

  • Remote hiring is available, with offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv.
  • The company emphasizes pay equity, diversity, equal opportunity, and an inclusive workplace.

Salary: $240k - $290k/yr

Runway

Runway builds generative video and multimodal AI tools—text-to-video, image-to-video, advanced video editing, and real-time agents—delivered via web apps and APIs for creators, studios, and enterprises. Its business model centers on subscriptions, usage-based credits, and licensing; notable relea...

Similar positions

Research Engineer, Synthetic Data

  • Pragmatike
  • Full time
  • Remote
  • 11/14/2026
  • APAC, US

Intern, Compiler Engineer

  • Samsung Semiconductor
  • Full time
  • USA
  • 11/14/2026
  • San Jose, CA

AI Scientist, Agentic CAD (AI4Engineering)

  • Mistral
  • Full time
  • Remote
  • 11/14/2026
  • Salary: Competitive
  • Europe

Senior Cloud Network Engineer

  • Nubank
  • Full time
  • Others
  • 11/14/2026
  • Campinas, Brazil

Sr. Data Engineer

  • KnowBe4
  • Full time
  • Others
  • 11/14/2026
  • Bengaluru, India