Sr. Security Engineer (Infrastructure)

SpaceX is looking for a Senior Security Engineer (Infrastructure) to help secure on-premises Kubernetes infrastructure and protect enterprise systems. In this onsite role in Bastrop, TX, you will design hardened platforms, automate platform operations, and work toward long-lasting fixes for production incidents.

What you’ll focus on

• Design on-premises Kubernetes platforms that security services run on, including the compute, storage, and networking those services depend on.
• Own cluster lifecycle work such as upgrades, capacity planning, failure domains, and safe change processes.
• Build automation that other engineers rely on to provision, configure, and operate the platform.
• Establish standards for deployment and operations so security services are consistently deployed, hardened, and run on Kubernetes.
• Harden clusters and workloads across RBAC, policy, secrets, and secure configuration.
• Respond to the hardest production incidents and drive durable remediation.
• Define signals, alerts, and operational practices that keep the platform supportable.
• Document how the platform runs, keep it operating effectively, and advise other teams on usage and operation.
• Identify systemic security and IT gaps, then deliver platform and deployment changes that reduce risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate across information security, IT, software, and partner teams.

Requirements

• Bachelor’s degree in computer science or another STEM discipline, or high school diploma/equivalency with 2+ years of professional experience operating production infrastructure.
• 5+ years of experience operating on-premises Kubernetes in a production environment.
• 5+ years of experience with Linux system administration and Python, Go, or another language used to automate infrastructure.

Preferred experience

• Production Kubernetes at scale, including control plane, networking, storage, RBAC, and upgrades.
• Experience designing on-premises compute, storage, and network architectures for container platforms.
• Cluster and node hardening, admission control, and secure workload configuration.
• Infrastructure as code and configuration management.
• Python or Go for platform tooling and automation.
• Linux internals and troubleshooting.
• Observability, alerting, and operational readiness for production platforms.
• CI/CD or GitOps-style delivery onto Kubernetes.
• Capacity planning, failure domains, and recovery for on-premises platforms.
• TCP/IP at the level needed to build and debug cluster networking.
• Root-cause debugging under time pressure.

Additional details

• Must be willing to work extended hours and/or weekends as needed.
• Onsite only in Bastrop, TX. Hybrid or remote work will not be considered.

ITAR requirement

To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful, permanent resident (green card holder), a Refugee under 8 U.S.C. § 1157, an Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

Technologies: Kubernetes, Linux, Python, Go, RBAC, CI/CD, GitOps, TCP/IP