SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

INFRASTRUCTURE SECURITY ENGINEER, BARE METAL & PLATFORM

We are seeking a hands-on Infrastructure Security Engineer to build and secure SpaceXSI's infrastructure from the bare-metal layer up through the platform and application stack. In this role, you will design, implement, and harden physical and private-cloud foundations—servers, networks, identity, and orchestration—and carry that security posture into containers, automation, and hybrid connectivity with public cloud.

This role focuses on securing critical infrastructure spanning data centers, colo, and hybrid environments, with work that may span platforms such as SpaceXSI, X Social, X Money, and related systems. You’ll operate with an automation-first mindset: building secure foundations at the metal and OS layer, hardening platforms at scale, and partnering closely with engineering so security is embedded in how we build and run systems—not bolted on after the fact.

RESPONSIBILITIES

Design and implement secure bare-metal and private-cloud architectures (servers, storage, out-of-band management, BIOS/UEFI/BMC firmware posture)
Harden physical and virtual fleets: OS baselines (Linux/Windows), CIS benchmarks, patch and vulnerability management, and secure boot / measured boot where applicable
Hands-on firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
Build and secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware
Own hybrid connectivity between on-premises and cloud (site-to-site VPN, Direct Connect / Interconnect / ExpressRoute, SD-WAN, zero-trust access)
Manage identities and privileged access across Active Directory / LDAP / Kerberos and cloud IAM (federation, SAML/OIDC, PAM)
Assist with security assessments and audits of physical, on-premises, and hybrid infrastructure
Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)
Design and implement secure container and Kubernetes standards on bare metal and private cloud (not only managed EKS/GKE/AKS), including RBAC, network policy, and secrets
Develop and maintain Infrastructure as Code and configuration management—especially Puppet—with embedded security controls for physical and virtual fleets
Collaborate with development teams so security best practices are integrated into CI/CD pipelines
Secure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms
Monitor and respond to security events and incidents spanning bare metal, network devices, hosts, and hybrid cloud
Maintain SIEM data pipelines that ingest on-premises network, host, and cloud telemetry for reliable alerting
Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet
Develop dashboards and alerts from security metrics across physical and platform layers
Develop and maintain infrastructure security policies, standards, and procedures from metal through platform
Own security projects end to end: identify issues and implement solutions
Stay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure

BASIC QUALIFICATIONS

Bachelor's degree in computer science, cybersecurity, or other scientific discipline