Member of Technical Staff, Cloud & Infrastructure Security

Job summary

Responsibilities

Fireworks runs multi-tenant GPU inference for hundreds of open models in production, and the security problems that come with it are concrete: isolating tenants on shared accelerators, protecting customer data and model weights across a multi-cloud footprint, and keeping all of it auditable while…

• Design and build security-focused software and platform capabilities to protect customer data, models, and services across our multi-cloud infrastructure, including encryption…
• Design and implement tenant isolation across shared GPU and accelerator infrastructure, covering host, device, scheduler, and model artifact boundaries.
• Perform security reviews of cloud-native architectures, including Kubernetes clusters, multi-cloud workloads, and distributed data stores, and build integrated systems for…
• Embed security into CI/CD pipelines using a DevSecOps approach, implementing automated scanning, policy enforcement, and secure-by-default build and deployment workflows.
• Apply a build-over-buy philosophy by designing and developing in-house security tooling and automation where it provides better control, scalability, and integration than…

What they're looking for

• 5+ years of experience in software engineering or security engineering with a strong focus on security, infrastructure, or cloud-native systems.
• Proficient in Python and/or Go, designing production-grade systems, and comfortable automating in Linux environments and in managed CI/CD (e.g., GitHub Actions, Harness, CircleCI).
• Production depth in GCP or AWS, including network segregation, authentication, authorization, encryption, data protection, intrusion detection, and cloud-specific security…
• Hands-on experience with Kubernetes, Docker, and containerized production environments; deep knowledge of Kubernetes internals and native security controls is a strong plus.
• Working knowledge of modern identity and access controls (SAML, OAuth, OIDC, SSO, RBAC/ABAC), least-privilege design, and workload identity.

Tech stack

• PyTorch
• Kubernetes
• Python
• Go
• GCP
• AWS
• Docker
• Azure