Staff Infrastructure Security Engineer

Crusoe•San Francisco, CA

2d•$215,000 - $260,000

About The Position

Crusoe is seeking a Senior Infrastructure Security Engineer dedicated to establishing a high-assurance security posture through deep visibility and granular access controls. In this role, you will leverage advanced tooling like Wiz to maintain an uncompromising security posture, using infrastructure service building as the primary mechanism to enforce these standards across our global compute platform.

Requirements

8+ years of hands-on experience in infrastructure engineering, SRE, or security engineering
Deep understanding of security principles across the stack, from Linux and container runtimes to cloud control planes
Proven experience using Infrastructure-as-Code (Terraform) to manage complex, multi-environment infrastructure at scale
Strong knowledge of cryptography, secrets management, PKI, and modern authentication standards
Experience securing public cloud (AWS, GCP) and/or bare-metal environments
Strong networking fundamentals, including routing, segmentation, firewalls, and Zero Trust architectures
Hands-on experience with Kubernetes and container security, including secure secrets injection into microservices
Fluency in at least one programming language (Go or Python preferred) for automation and tooling

Nice To Haves

Background securing high-scale cloud or AI infrastructure
Experience implementing Zero Trust identity architectures end-to-end
Familiarity with bare-metal provisioning and data center security considerations
Experience building or operating internal security platforms (e.g., Vault-as-a-Service)
Deep experience with Wiz or similar CSPM platforms for enterprise-scale risk management.

Responsibilities

Drive comprehensive Infrastructure Security Posture Management (ISPM) and cloud-native visibility, leveraging tools like Wiz to identify risks, drift, and misconfigurations across cloud and on-prem infrastructure.
Championing Infrastructure-as-Code (IaC) standards (e.g., Terraform) to enforce secure defaults, immutability, and drift detection
Driving Infrastructure Security Access and Posture Management for both cloud and on-prem infrastructure to ensure comprehensive visibility and governance
Building automated security guardrails embedded directly into CI/CD and deployment pipelines
Operate security-as-a-service platforms (e.g., secrets management, certificate lifecycles) designed to reinforce our security posture and simplify developer access workflows.
Designing and operating certificate lifecycles (X.509, SSH) to support secure machine-to-machine trust
Contribute to identity-centric access control systems, specifically focusing on short-lived, Just-In-Time (JIT) access models, Zero Trust, and automated authorization policies to eliminate standing privileges.
Securing core network foundations, including global DNS architecture, service discovery, and network authentication systems
Designing and maintaining authentication controls for network infrastructure to ensure secure, monitored access
Partnering closely with infrastructure, platform, and SRE teams to identify and remediate security gaps in foundational systems