Security Engineer, Data Center

OpenAI•San Francisco, CA

7d•Hybrid

About The Position

We are seeking an experienced and highly technical Data Center Security Engineer to help secure the infrastructure behind OpenAI’s rapidly expanding data center footprint. This is a chance to work on high-consequence systems at the intersection of cybersecurity, critical infrastructure, and advanced AI, where strong technical judgment and careful execution have direct, lasting impact. In this role, you will operate with substantial agency and ownership alongside a small team of data center security experts, driving security architecture, control validation, and defensive improvements across multiple, diverse environments, with particular emphasis on IT, Enterprise, ICS and Operational Technology (OT) networking. You will help define and raise the security bar for infrastructure programs already in flight while shaping how future deployments are secured from the start. This role's preferred location is one of our OpenAI offices in San Francisco, Seattle, or New York City and relocation assistance is available. We are also open to considering candidates who are remote.

Requirements

15+ years of experience in security, including meaningful hands-on experience securing large-scale infrastructure, industrial environments, or data center systems.
Deep expertise securing OT and IT networking environments in critical infrastructure settings, including segmentation strategies, remote access controls, asset visibility, and compensating controls for operational constraints.
Experience building audit or assurance programs that validate ongoing compliance with defined security controls, especially across OT and IT networking environments, rather than relying on one-time point-in-time reviews.
Strong cross-functional collaboration skills including the ability to partner effectively with internal and external stakeholders while operating with a high degree of autonomy.
Strong knowledge of security engineering and operations across network security, IAM and PAM, hardening, provisioning, monitoring, incident response, and secure lifecycle practices.
Experience protecting hyperscale, colocation, or hybrid infrastructure environments against sophisticated adversaries.
Familiarity with control and governance frameworks such as NIST, ISO 27001, or SOC 2, and the ability to translate them into concrete technical and operational requirements.
The ability to operate as a high-ownership individual contributor who influences through technical judgment, collaboration, and execution.
Clear written and verbal communication skills, including the ability to explain risk, controls, and tradeoffs to both technical and non-technical partners.

Responsibilities

Design and implement security controls that protect data center infrastructure across a growing global footprint, with particular focus on both OT and IT networking environments.
Partner closely with a small team of data center security specialists, as well as engineering, operations, and broader security teams, to deliver resilient and practical security outcomes.
Secure OT and IT networking environments through strong segmentation, access control, monitoring, hardening, and connectivity patterns suited to critical infrastructure.
Contribute to security architecture and design reviews for data center systems, including OT and IT networking, network segmentation, identity and access management, provisioning workflows, hardware and firmware trust boundaries, and operational safeguards.
Perform recurring audits, control assessments, and validation activities across OT and IT networking environments to ensure continued compliance against defined controls.
Drive ongoing evidence collection, gap tracking, and remediation follow-through so control deficiencies are identified quickly and closed durably.
Help define measurable security standards, control objectives, audit procedures, evidence requirements, and validation mechanisms for infrastructure and facility security programs.
Support security monitoring, incident response, and post-incident improvement efforts for data center, OT, and IT networking environments.
Work with suppliers, partners, and internal stakeholders to evaluate and reduce risks associated with third-party hardware, firmware, software, and operational dependencies.
Continually evolve the security of our data centers alongside changes in adversary activity, infrastructure complexity, and the increasing demands of OpenAI’s systems.