Sr. Security Engineer (Infrastructure)

SpaceX•Cape Canaveral, FL

6d•Onsite

About The Position

SpaceX is seeking a Sr. Security Engineer to join Information Security and help protect the company’s systems and processes. The role focuses on designing and operating on-premises Kubernetes platforms that host security services, along with the compute, storage, and networking those platforms depend on. The engineer will lead cluster lifecycle and production operations, build provisioning and operations automation, set deployment and hardening standards, and improve security and reliability across the platform. The position is onsite; hybrid or remote work will not be considered. Candidates must be willing to work extended hours and/or weekends as needed, hold a valid driver’s license, and be able to pass an Air Force background check for Cape Canaveral. ITAR eligibility requirements apply.

Requirements

Bachelor’s degree in computer science or another STEM discipline, or at least 2 years of professional experience operating production infrastructure and a high school diploma or equivalency certificate in lieu of a degree.
At least 5 years of experience operating on-premises Kubernetes in a production environment.
At least 5 years of experience with Linux system administration and Python, Go, or another language used to automate infrastructure.
Willingness to work extended hours and/or weekends as needed.
Must work onsite; hybrid or remote work will not be considered.
Valid driver’s license.
Ability to pass an Air Force background check for Cape Canaveral.
Must meet the stated U.S. Government export regulation eligibility requirements or be eligible to obtain the required authorizations.

Nice To Haves

Production Kubernetes at scale, including control plane, networking, storage, RBAC, and upgrades.
Experience designing on-premises compute, storage, and network architectures for container platforms.
Experience with cluster and node hardening, admission control, and secure workload configuration.
Infrastructure as code and configuration management experience.
Python or Go experience for platform tooling and automation.
Linux internals and troubleshooting experience.
Experience with observability, alerting, and operational readiness for production platforms.
CI/CD or GitOps-style delivery onto Kubernetes.
Experience with capacity planning, failure domains, and recovery for on-premises platforms.
TCP/IP knowledge sufficient to build and debug cluster networking.
Root-cause debugging under time pressure.

Responsibilities

Design on-premises Kubernetes platforms for security services, including their compute, storage, and networking dependencies.
Lead cluster lifecycle work, including upgrades, capacity, failure domains, and safe changes.
Build automation engineers use to provision, configure, and operate the platform.
Set standards for deploying, hardening, and operating security services on Kubernetes.
Harden clusters and workloads, including RBAC, policy, secrets, and secure configuration.
Respond to difficult production incidents and drive them to durable fixes.
Define signals, alerts, and operational practices that keep the platform supportable.
Document and maintain the platform, and advise other teams on it.
Identify systemic gaps with security and IT, then deliver platform and deployment changes that reduce risk.
Deliver scalable, repeatable, maintainable, and secure solutions.
Coordinate with information security, IT, software, and other partners.