Principal Security Infrastructure Engineer

As a Principal Security Infrastructure Engineer, you will have the opportunity to build a modern IT infrastructure from the ground up. We build our systems cloud-first, with an emphasis on researching and deploying the latest technologies and paradigms. You will identify opportunities to improve and expand our IT infrastructure to enhance speed, security, and ease of use. You will have the opportunity to plan, build, test, deliver, and maintain projects from start to finish. Likewise, you will prioritize establishing our IT function to be an ally to enhance employee productivity while balancing security.

This will be a full-time, exempt position located in our Long Beach location.

Responsibilities:

• Architect and secure Kubernetes clusters on bare metal and cloud environments, emphasizing isolation, encryption, and policy enforcement.
• Develop and manage secure provisioning for bare metal systems, including DHCP, DNS, PXE/iPXE/HTTPBoot, and Linux, with an emphasis on measured boot, secure boot, and hardware trust.
• Build and maintain security tooling and automation (Go, Python, Bash) for provisioning, monitoring, and continuous security validation across environments.
• Collaborate with data center operations, hardware, and networking teams to enforce physical security, network segmentation, and zero-trust principles.
• Manage infrastructure configuration using GitOps (Git, Flux, Terraform) with security scanning and policy-as-code controls.
• Establish monitoring and alerting pipelines to detect, investigate, and respond to security events in infrastructure and cloud systems.
• Maintain and improve system documentation, runbooks, and security procedures for consistent, auditable, and repeatable infrastructure operations.
• Conduct threat modeling and risk assessments on infrastructure components, driving remediation to reduce the attack surface.
• Support incident response activities, including containment, analysis, and post-incident improvements to infrastructure security.

Minimum Qualifications:

• 3+ years experience designing, deploying, and managing highly available self-hosted security services such as a SIEM
• Years of experience in building modern DevOps tools & best practices: CI/CD systems, deployment tools (CloudFormation, Terraform, Pulumi, etc.).
• Deep expertise with the cloud and Kubernetes.
• Understanding of networking/security/auth constructs and requirements.

Preferred Skills & Experience:

• Experience with Kubernetes security (RBAC, PodSecurity, admission controllers, policy enforcement, and runtime security tooling).
• Experience building and maintaining observability pipelines (Falco, eBPF, OSQuery, or similar tooling).
• Proficiency with Linux and Kubernetes bootstrapping with a focus on secure provisioning.
• Experience collaborating with facilities, hardware, or network teams to enforce physical and logical security in a data center environment.

Pay Range:

• Principal Security Infrastructure Engineer: $188,100 - $270,600