Infrastructure Engineer, Security

Engram Lab•San Francisco, CA

4d•Onsite

About The Position

Engram is hiring an Infrastructure Engineer to own and evolve the systems that keep each customer's data, training runs, and models isolated, from ingestion through training to inference. The role builds and operates cloud infrastructure for training and serving customer models, with security boundaries across cloud environments and Engram-managed bare-metal compute. The engineer will work closely with researchers and engineers to make secure infrastructure fast and practical as Engram adds customers and providers. The position also leads security operations and customer trust, including maintaining logging and monitoring, responding to incidents, and helping clarify security reviews and compliance work. This is an in-person role at Engram's San Francisco office. Engram offers competitive cash compensation and startup equity.

Requirements

Bachelor’s degree or equivalent practical experience in computer science, engineering, machine learning, or a related field.
Four years of work experience as a software engineer or equivalent, excluding internships.
Experience building and operating production infrastructure on AWS.
IAM expertise, including cross-account roles, STS, resource and key policies, KMS, and multi-account organizations.
Experience with Infrastructure-as-Code such as Terraform at multi-account scale, including secure patterns for networks, IAM, and shared services.
A rigorous approach to multi-tenant isolation.
A track record of owning complex, production-critical systems end to end.
Comfort with ambiguity and high ownership at an early-stage company.
Strong production-grade coding skills in Python, Rust, or a similar language; the role involves shipping code as well as configuration.

Nice To Haves

Experience as an early infrastructure or security hire at a startup.
Experience with ML infrastructure, such as GPU training and model serving.
Experience supporting enterprise security reviews and compliance programs such as SOC 2.
Open-source contributions, talks, or writing on cloud or infrastructure security.
Experience on Azure or GCP.

Responsibilities

Build and operate cloud infrastructure for training and serving Engram customer models.
Design and enable boundaries that separate each customer's data, training runs, and models across cloud and Engram-managed bare-metal compute.
Partner with researchers and engineers to develop paved roads that improve isolation and security.
Evaluate and secure providers and tools, including Modal, Baseten, Fireworks, bare-metal compute, and Kubernetes.
Lead security operations and customer trust, including maintaining logging and monitoring, responding to incidents, and supporting security reviews and compliance work.