> Markdown version of [/jobs/ext/3015812-security-engineer-infrastructure-security](https://www.wearedevelopers.com/jobs/ext/3015812-security-engineer-infrastructure-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - Infrastructure Security - **Company:** Ai Robotics - **Location:** San Jose, CA, United States - **Experience:** Expert - **Salary:** $150,000.0 - $250,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, User Authentication, Microsoft Azure, C++ (Programming Language), Cloud Computing Security, Information Systems, Data Centers, DevOps, Python (Programming Language), Key Management, Software Engineering, Rust (Programming Language), Scripting, Google Cloud, Istio, Multi-Cloud, Amazon Virtual Private Cloud (VPC), Kubernetes, Information Technology, Golang - **Published:** September 20, 2026 - **Apply:** https://startup.jobs/security-engineer-infrastructure-security-figure-2-10114610 ## About the Role * Experience and security knowledge of one or more domains and technologies: Kubernetes, containers, service mesh, networking, operating system internals, authentication/authorization protocols, and cloud security tools. * Experience developing and deploying services in multi-cloud environments, preferably familiar with a multi-cloud infrastructure spanning at least two of the three: Azure, AWS, or Google Cloud Platform. * 6+ years of security / software development experience. * Strong software engineering skills (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar. * Passion for learning and helping others. * Excellent verbal and written communication skills, with high attention to detail. * BS/BA in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field, * Familiarity with zero-trust networking, posture-based access control, and egress/segmentation design. * Hands-on with workload identity / federated credentials, and secrets management. * Experience with delivering security controls as reviewed, versioned code. * Familiarity with securing AI/ML tool usage across infrastructure. * Track record of building self-service security tooling and paved paths that scale to a fast-moving engineering org. * Experience securing on-prem or neocloud alongside public cloud. ## Description Partner across teams * Work with the DevOps and Infrastructure teams to securely roll out AI tooling across our infrastructure, securing the deployment path, service-to-service communication, and the network boundaries around these workloads. * Partner with the Networking team on data-center and cloud network security: NSGs, segmentation, VPC structure, private connectivity, and egress policy. * Enable the Detection & Response team by making every environment produce the telemetry they need, and provide environment access and context during incidents. Authentication / Authorization * Own multi-cloud authentication and authorization: centralized SSO for human identities, workload identity and federated credentials for machine identities, and consistent, least-privilege access policy across cloud providers. * Extend that identity model to on-prem and neocloud environments, including hardware-rooted machine identity so all our infrastructure inherits the same authN/authZ guarantees as our cloud backends. * Drive the move away from long-lived reusable credentials toward sealed, short-lived, workload-scoped authentication, and build just-in-time, time-bound elevated access. Visibility * Measure posture: build the tooling and pipelines for asset and identity inventory, configuration drift detection, and coverage metrics across cloud, on-prem, and neocloud environments. * Turn misconfiguration and vulnerability findings into tracked, closed-loop remediation across every environment class. Networking * Advance our zero-trust networking model as the universal access layer: identity-aware, posture-gated access to internal services with no public IPs and no cross-environment traffic outside the overlay. * Design and enforce egress controls so workloads can't make arbitrary outbound calls. * Define the secure-by-default networking patterns other teams build on top of, so segmentation and access rules are versioned, reviewed, and auditable rather than hand-configured. ## Related Videos - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [The New AI Security Stack: Observe, Detect, Protect](https://www.wearedevelopers.com/videos/100302-the-new-ai-security-stack-observe-detect-protect) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [What is Software Engineering in the Age of AI?](https://www.wearedevelopers.com/magazine/640-what-is-software-engineering-in-the-age-of-ai)