Thinking Machines Lab logo
Thinking Machines Lab NewPosted 16h ago

Infrastructure Engineer, Security

Location

San Francisco

On-site

Contract

Permanent

Full-time

Salary

$300–350k

Gross per year

Experience

Not specified

Job summary

Responsibilities

We’re looking for an infrastructure engineer to own and evolve the security infrastructure that underpins our foundation models. In this role, you’ll work across compute, storage, networking, and data platforms, making sure our systems are secure, reliable, and built to scale.

  • Architect security patterns for platforms and services, including network segmentation, service-to-service authentication, RBAC, and policy enforcement in Kubernetes and cloud…
  • Manage identity, access, and secrets for humans and services: workload and cross-cloud identity, least-privilege IAM, and secrets management.
  • Build secure platforms for data ingestion, processing, and curation: classification, encryption, access controls, and safe sharing patterns across teams.
  • Write threat models and review designs with researchers and engineers to help them ship features and experiments in a safe, scalable way.
  • Automate security checks and build guardrails: policy-as-code, secure infrastructure baselines, validation in CI/CD, and tools that make the secure path the easiest one.

What they're looking for

  • Bachelor’s degree or equivalent experience in engineering, or similar.
  • Strong background with containers and orchestration (e.g., Kubernetes) and how to secure them (namespaces, network policies, pod security, admission controls, etc.)
  • Practical experience with Infrastructure as Code (Terraform or similar), including secure patterns for provisioning networks, IAM, and shared services.
  • Solid understanding of cloud networking and security: VPCs, load balancers, service discovery, mTLS, firewalls, and zero-trust-style architectures.
  • Proficiency with a systems language such as Rust and scripting in Python for building platform components and internal tools.

Tech stack

Read the full job posting

This summary is written by Tokn from the original posting. Only the posting published by Thinking Machines Lab is authoritative. Request a removal

jobs.ashbyhq.com ↗