Infrastructure & Security Engineer

Engram Lab•San Francisco, CA

2d•Onsite

About The Position

Engram trains models on each customer's documents, messages, code, and knowledge bases, and retrains them continuously as that context changes. The Infrastructure & Security Engineer will own and evolve systems that maintain customer isolation from data ingestion through training and inference as Engram adds customers and providers. The role works closely with researchers to ensure secure systems are also performant. The engineer will build and operate cloud infrastructure for training and serving customer models, establish isolation boundaries across cloud and Engram-managed bare-metal compute, and improve security through shared engineering practices. The role also covers securing infrastructure providers and tools, security operations, incident response, logging and monitoring, customer trust, security reviews, and compliance work.

Requirements

A bachelor's degree or equivalent practical experience in computer science, engineering, machine learning, or a related field.
Four years of work experience as a software engineer or equivalent, excluding internships.
Experience building and operating production infrastructure on AWS, including IAM expertise with cross-account roles, STS, resource and key policies, KMS, and multi-account organizations.
Experience with Infrastructure-as-Code, such as Terraform, at multi-account scale, including secure patterns for networks, IAM, and shared services.
A rigorous approach to multi-tenant isolation.
A track record of owning complex, production-critical systems end to end.
Comfort with ambiguity and high ownership at an early-stage company.
Strong production-grade coding skills in Python, Rust, or a similar language; the role involves shipping code as well as configuration.

Nice To Haves

Experience as an early infrastructure or security hire at a startup.
Experience with ML infrastructure, such as GPU training and model serving.
Experience supporting enterprise security reviews and compliance programs such as SOC 2.
Open-source contributions, talks, or writing on cloud or infrastructure security.
Experience with Azure or GCP.

Responsibilities

Build and operate cloud infrastructure used to train and serve Engram customer models.
Design and enable boundaries that keep each customer's data, training runs, and models separate across cloud and Engram-managed bare-metal compute.
Partner with researchers and engineers to develop paved roads that improve isolation and security.
Evaluate and secure providers and tools, including Modal, Baseten, Fireworks, bare-metal compute, and Kubernetes.
Lead security operations and customer trust, including maintaining logging and monitoring, responding to incidents, and supporting security reviews and compliance work.