Security Engineer (Infrastructure)

SpaceX is seeking a Security Engineer (Infrastructure) to strengthen and improve internal information security through hardened, on-premises Kubernetes infrastructure. In this onsite role in Bastrop, Texas, you will design, build, and operate secure cluster environments, automate operational workflows, and help reduce risk through platform changes that address real threats and gaps.

What you’ll do

• Design, build, and operate on-premises Kubernetes clusters that security services run on.
• Automate cluster build-out, configuration, upgrades, and day-to-day operations.
• Operate the compute, storage, and networking that the Kubernetes platform depends on.
• Maintain reliability of key platform services, including scheduling, ingress, load balancing, and storage.
• Harden clusters and workloads using controls such as RBAC, policy, secrets, and secure configuration.
• Respond to production incidents and drive fixes to completion.
• Instrument clusters and workloads so failures are detected before they become outages.
• Document what you run, keep systems operational, and advise other teams on cluster and security practices.
• Work with security and IT to identify threats and gaps, then deliver platform and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, IT, software, and other partners.

Required qualifications

• Bachelor’s degree in computer science or another STEM discipline, or 2+ years of professional experience operating production infrastructure plus a high school diploma or equivalency certificate in lieu of a degree.
• Experience operating on-premises Kubernetes in a production environment.
• Experience with Linux system administration and at least one automation-friendly language such as Python, Go, or another language used to automate infrastructure.

Preferred experience

• Production Kubernetes operations across control plane, workloads, networking, storage, RBAC, and upgrades.
• Experience with on-premises compute, storage, and networking for container platforms.
• Cluster and node hardening, admission control, and secure workload configuration.
• Infrastructure as code and configuration management.
• Linux troubleshooting and root-cause debugging under time pressure.
• Observability using metrics, logs, and alerting.
• CI/CD or GitOps-style delivery onto Kubernetes.
• Backup, restore, and recovery for on-premises platforms.
• TCP/IP knowledge at a level needed to build and debug cluster networking.

Technologies

• Kubernetes
• Linux
• Python
• Go
• RBAC
• TCP/IP

Role requirements

• Willingness to work extended hours and/or weekends as needed.
• Onsite work only. Hybrid or remote work will not be considered.

ITAR

To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful permanent resident (green card holder), a Refugee under 8 U.S.C. § 1157, or an Asylee under 8 U.S.C. § 1158, or be eligible to obtain required authorizations from the U.S. Department of State.

Location: Bastrop, TX (onsite)

Minimum experience: 2 years