SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Crusoe is a vertically integrated AI infrastructure company building the next generation of energy-efficient compute platforms. As a Senior Infrastructure Security Engineer, you will establish and maintain a high-assurance security posture across Crusoe's global compute infrastructure, from cloud to on-premises environments.
You will drive comprehensive Infrastructure Security Posture Management (ISPM) using advanced tooling like Wiz to identify risks, misconfigurations, and drift across hybrid cloud and on-prem infrastructure. You'll champion Infrastructure-as-Code standards (Terraform) to enforce secure defaults and immutability, building automated security guardrails directly into CI/CD and deployment pipelines.
Key responsibilities include designing and operating certificate lifecycles (X.509, SSH) for secure machine-to-machine trust, implementing identity-centric access control systems with Just-In-Time (JIT) access and Zero Trust principles, and securing core network foundations including global DNS architecture and service discovery. You'll operate security-as-a-service platforms for secrets management and certificate lifecycle automation, and partner closely with infrastructure, platform, and SRE teams to identify and remediate security gaps.
You bring 5-8 years of hands-on experience in infrastructure engineering, SRE, or security engineering, with deep understanding of security across the stack from Linux and container runtimes to cloud control planes. You have proven expertise with Terraform at scale, strong cryptography and PKI knowledge, and hands-on experience securing public cloud (AWS, GCP) and bare-metal environments. Strong networking fundamentals, Kubernetes and container security experience, and fluency in Go or Python are essential. Bonus experience includes securing high-scale AI infrastructure, implementing Zero Trust architectures end-to-end, bare-metal provisioning, building internal security platforms, and deep CSPM platform experience.
