Sr. Security Engineer (Infrastructure)

SpaceX•Bastrop, TX

23d•Onsite

About The Position

SpaceX is seeking a Sr. Security Engineer to join Information Security and help protect and advance the company’s mission. The role focuses on designing and operating on-premises Kubernetes platforms that host security services, along with the compute, storage, and networking those platforms depend on. The engineer will lead cluster lifecycle work, build platform automation, establish deployment and hardening standards, and help ensure the environment is scalable, repeatable, maintainable, and secure. The position also involves handling complex production incidents, defining operational signals and practices, documenting and maintaining the platform, and working with security, IT, software, and other teams to identify systemic gaps and reduce risk. The role is onsite; hybrid and remote work are not considered. Extended hours and/or weekends may be required as needed. Applicants must satisfy SpaceX’s stated ITAR eligibility requirements: be a U.S. citizen or national, lawful permanent resident, refugee, or asylee, or be eligible to obtain required U.S. Department of State authorizations.

Requirements

Bachelor's degree in computer science or another STEM discipline; alternatively, 2+ years of professional experience operating production infrastructure and a high school diploma or equivalency certificate in lieu of a degree.
5+ years of experience operating on-premises Kubernetes in a production environment.
5+ years of experience with Linux system administration and Python, Go, or another language used to automate infrastructure.
Must be willing to work extended hours and/or weekends as needed.
Must work onsite; hybrid or remote work will not be considered.
Must meet the stated ITAR eligibility requirements or be eligible to obtain the required authorizations from the U.S. Department of State.

Nice To Haves

Production Kubernetes at scale, including control plane, networking, storage, RBAC, and upgrades.
Experience designing on-premises compute, storage, and network architectures for container platforms.
Cluster and node hardening, admission control, and secure workload configuration.
Infrastructure as code and configuration management.
Python or Go for platform tooling and automation.
Linux internals and troubleshooting.
Observability, alerting, and operational readiness for production platforms.
CI/CD or GitOps-style delivery onto Kubernetes.
Capacity planning, failure domains, and recovery for on-premises platforms.
TCP/IP knowledge for building and debugging cluster networking.
Root-cause debugging under time pressure.

Responsibilities

Design on-premises Kubernetes platforms for security services, including their dependent compute, storage, and networking.
Lead cluster lifecycle work, including upgrades, capacity, failure domains, and safe changes.
Build automation for provisioning, configuring, and operating the platform.
Set standards for deploying, hardening, and operating security services on Kubernetes.
Harden clusters and workloads, including RBAC, policy, secrets, and secure configuration.
Respond to complex production incidents and drive durable fixes.
Define signals, alerts, and operational practices that keep the platform supportable.
Document and maintain the platform and advise other teams on it.
Work with security and IT to identify systemic gaps and deliver platform and deployment changes that reduce risk.
Deliver scalable, repeatable, maintainable, and secure solutions.
Coordinate with information security, IT, software, and other partners.