SpaceX is looking for a Senior Security Engineer (Infrastructure) to help secure on-premises Kubernetes infrastructure and protect enterprise systems. In this onsite role in Bastrop, TX, you will design hardened platforms, automate platform operations, and work toward long-lasting fixes for production incidents.
What you’ll focus on
- Design on-premises Kubernetes platforms that security services run on, including the compute, storage, and networking those services depend on.
- Own cluster lifecycle work such as upgrades, capacity planning, failure domains, and safe change processes.
- Build automation that other engineers rely on to provision, configure, and operate the platform.
- Establish standards for deployment and operations so security services are consistently deployed, hardened, and run on Kubernetes.
- Harden clusters and workloads across RBAC, policy, secrets, and secure configuration.
- Respond to the hardest production incidents and drive durable remediation.
- Define signals, alerts, and operational practices that keep the platform supportable.
- Document how the platform runs, keep it operating effectively, and advise other teams on usage and operation.
- Identify systemic security and IT gaps, then deliver platform and deployment changes that reduce risk.
- Deliver solutions that are scalable, repeatable, maintainable, and secure.
- Coordinate across information security, IT, software, and partner teams.
Requirements
- Bachelor’s degree in computer science or another STEM discipline, or high school diploma/equivalency with 2+ years of professional experience operating production infrastructure.
- 5+ years of experience operating on-premises Kubernetes in a production environment.
- 5+ years of experience with Linux system administration and Python, Go, or another language used to automate infrastructure.
Preferred experience
- Production Kubernetes at scale, including control plane, networking, storage, RBAC, and upgrades.
- Experience designing on-premises compute, storage, and network architectures for container platforms.
- Cluster and node hardening, admission control, and secure workload configuration.
- Infrastructure as code and configuration management.
- Python or Go for platform tooling and automation.
- Linux internals and troubleshooting.
- Observability, alerting, and operational readiness for production platforms.
- CI/CD or GitOps-style delivery onto Kubernetes.
- Capacity planning, failure domains, and recovery for on-premises platforms.
- TCP/IP at the level needed to build and debug cluster networking.
- Root-cause debugging under time pressure.
Additional details
- Must be willing to work extended hours and/or weekends as needed.
- Onsite only in Bastrop, TX. Hybrid or remote work will not be considered.
ITAR requirement
To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful, permanent resident (green card holder), a Refugee under 8 U.S.C. § 1157, an Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
Technologies: Kubernetes, Linux, Python, Go, RBAC, CI/CD, GitOps, TCP/IP
