Director, Infrastructure Security

Crusoe•San Francisco, CA

11d•$285,000 - $335,000•Hybrid

About The Position

Crusoe is seeking a Director, Infrastructure Security to lead a team of 5-6 infrastructure security engineers. This role is critical to the company's security engineering organization, focusing on designing, building, and operating foundational security layers across their hyper-scale fleet. The position offers a high-impact leadership opportunity to transform an established team into a world-class engineering unit by sharpening technical focus, resolving execution friction, and instilling a high-velocity software delivery culture. The Director will report directly to the Senior Director of Security Engineering and will own two core pillars: Platform Security Engineering and Infrastructure Security Access and Posture Management. This is an active software engineering discipline, not a pure 'cloud security' function, emphasizing building foundational cryptographic, identity, access, and runtime layers.

Requirements

8+ years leading and scaling software engineering, or security engineering teams at hyper-scale cloud providers (AWS, GCP, Azure, OCI) or infrastructure-intensive platforms.
Led builder-focused teams that delivered core platform security functionality and software systems at scale.
Demonstrated success inheriting existing engineering teams, fixing execution friction, building high-trust team cultures, and raising the technical bar.
Proven track record of shipping core security platforms (Vault, SPIFFE/SPIRE, eBPF sensors, JIT access engines).
Demonstrated ability to dissect complex cloud/on-prem deployment architectures, isolate blast radiuses, and eliminate co-mingled execution risks.
Deep comprehension of Linux kernel security, container runtimes (Kubernetes), IAM frameworks, PKI, and lower-level hardware/network primitives (GPUs, switches, bare-metal orchestrators).
In-person / Hybrid presence in the San Francisco Bay Area.

Responsibilities

Inherit, lead, and mentor an existing team of 5-6 infrastructure security engineers.
Diagnose execution bottlenecks, resolve cultural alignment issues, and elevate the team into a high-throughput engineering organization.
Transition the team from reactive operational task handling to a proactive platform engineering model with clear shipping cadences, code quality standards, and architectural roadmaps.
Establish clear accountability and strategically hire additional junior talent.
Build, operate, and scale core identity and crypto primitives, including workload identity (SPIFFE/SPIRE), enterprise secrets-as-a-service (HashiCorp Vault), and public key infrastructure (PKI).
Deploy and manage eBPF-based security sensors at scale across bare-metal and virtualized fleets.
Architect and enforce zero-trust, Just-In-Time (JIT) access mechanisms for engineers and operators.
Build mechanisms for secure boot, hardware roots of trust, firmware update delivery, and software supply chain verification.
Build platforms to continuously track, prioritize, and remediate vulnerability states.
Secure Crusoe’s multi-layer control plane across public cloud environments (GCP) and on-premise AI data center infrastructure.
Eliminate standing admin privileges and long-lived secrets, and architect least-privilege RBAC/ABAC models.
Identify and eliminate systemic architectural risks.
Perform continuous security architecture reviews, enforcing change management, isolation, and baseline posture through IaC.