SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 258,000 / annual
X.ai is seeking a hands-on Infrastructure Security Engineer to design, build, and secure infrastructure spanning bare-metal data centers, private cloud, and hybrid environments. You will work across the full stack—from firmware and hardware lifecycle management through containerized platforms—to embed security into how systems are built and operated rather than bolting it on afterward.
Key responsibilities include:
**Bare Metal, Data Center & Network Security:** Design and implement secure bare-metal and private-cloud architectures (servers, storage, out-of-band management, BIOS/UEFI/BMC firmware). Harden physical and virtual fleets using OS baselines (Linux/Windows), CIS benchmarks, patch management, and secure/measured boot. Work hands-on with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security. Build and secure network foundations including segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS. Own hybrid connectivity between on-premises and cloud (site-to-site VPN, Direct Connect, SD-WAN, zero-trust access). Manage identities and privileged access across Active Directory/LDAP/Kerberos and cloud IAM (federation, SAML/OIDC, PAM). Assist with security assessments and audits; monitor and remediate infrastructure to comply with regulations (PCI, NIST CSF, GDPR, HIPAA).
**Platform, Containers & Developer Enablement:** Design and implement secure container and Kubernetes standards on bare metal and private cloud, including RBAC, network policy, and secrets management. Develop and maintain Infrastructure as Code and configuration management (especially Puppet) with embedded security controls. Collaborate with development teams to integrate security best practices into CI/CD pipelines. Secure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms.
**Detection, Operations & Tooling:** Monitor and respond to security events and incidents spanning bare metal, network devices, hosts, and hybrid cloud. Maintain SIEM data pipelines ingesting on-premises network, host, and cloud telemetry. Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet. Develop dashboards and alerts from security metrics. Develop and maintain infrastructure security policies, standards, and procedures. Own security projects end to end; stay current with emerging threats and mitigations.
The organization operates with a flat structure; all employees are hands-on and expected to contribute directly to the mission. Work ethic, strong prioritization, and excellent communication skills are essential.
**Requirements:**
- Bachelor's degree in Computer Science, Cybersecurity, or related field
- 3–5 years of experience in infrastructure security, platform security, or related hands-on roles
- Proven experience securing bare-metal, data-center, or private-cloud environments (not cloud-only)
- Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
- Strong proficiency with Puppet for configuration management and fleet hardening in production
- Strong understanding of network security concepts and protocols; hands-on work with firewalls, segmentation, and hybrid connectivity
- Experience with hybrid identity (AD/LDAP or similar) integrated or federated with cloud IAM
- Experience with Infrastructure as Code (e.g., Terraform) applied to physical or VM fleets
- Familiarity with containerization and Kubernetes security implications, including on-premises or bare-metal clusters
- Experience with languages (e.g., Python, Bash, Golang) for automation and tool development
- Familiarity with regulatory compliance requirements (GDPR, HIPAA, PCI DSS, NIST CSF)
- Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms
- Proactive mindset with strong ownership, critical thinking, and problem-solving skills
- Located in SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office
**Preferred Skills:**
- Deep expertise operating and securing physical server fleets, colo, or private cloud (VMware, OpenStack, Proxmox, Nutanix, or similar)
- Relevant security certifications (CCSP, CSSK, OSCP, network or cloud security specialty)
- Strong proficiency with Python and Terraform on production fleets
- Deep expertise in Kubernetes and container security on bare metal or private cloud
- Multi-cloud and cloud-to-on-prem security knowledge
- CI/CD best practices and tools; hands-on GitHub Actions or equivalent
- Observability and security operations tooling (Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)
- Experience building custom security tools or integrations
- Interest in leveraging AI for infrastructure security monitoring and automation
- Open-source infrastructure or security project contributions
- Experience securing AI/ML and GPU workloads on bare metal or hybrid infrastructure
