Infrastructure Security Engineer

Job summary

Responsibilities

Runway is hiring an Infrastructure Security Engineer to secure the platform our models are trained and served on. The role covers Kubernetes platform security, cloud identity and access, software supply chain, tenant isolation in the serving layer and the research infrastructure behind our models.

• Open to hiring remote — we also have offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv.
• Design and ship security controls in our Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy and runtime hardening across every cluster we run
• Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing and provenance, and admission controls that…
• Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials and workload federation
• Secure research infrastructure and training pipelines, including access to model weights and datasets, without slowing down the people using them

What they're looking for

• Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised
• Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work
• Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else
• Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts
• An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement

Tech stack

• Kubernetes
• Python
• TypeScript
• Rust