Security Engineer (Infrastructure)

In this onsite role, you will help protect and strengthen mission-critical systems by designing, building, and operating hardened, on-premises Kubernetes infrastructure and security services. You will work close to internal partners to reduce operational and security risk, while using automation, observability, and incident response to keep platforms reliable and resilient.

Responsibilities

• Design, build, and operate on-premises Kubernetes clusters that security services run on.
• Automate cluster build-out, configuration, upgrades, and day-to-day operations.
• Run the underlying compute, storage, and networking used by the clusters.
• Maintain the reliability of core platform services, including scheduling, ingress, load balancing, and storage.
• Harden clusters and workloads using controls such as RBAC, policy, secrets, and secure configuration.
• Respond to production incidents and drive issues to resolution.
• Instrument clusters and workloads so failures are visible early, reducing the chance of outages.
• Document what you operate, keep it functioning, and advise other teams on platform details.
• Identify threats and gaps with security and IT, then ship platform and deployment changes that lower risk.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.
• Coordinate with information security, IT, software, and other partners.

Requirements

• Bachelor’s degree in computer science or another STEM discipline; or 2+ years of professional experience operating production infrastructure, plus a high school diploma or equivalency certificate in lieu of a degree.
• Experience operating on-premises Kubernetes in a production environment.
• Experience with Linux system administration and with Python, Go, or another language used to automate infrastructure.

Preferred Skills and Experience

• Production Kubernetes operations across control plane, workloads, networking, storage, RBAC, and upgrades.
• On-premises compute, storage, and networking for container platforms.
• Cluster and node hardening, including admission control and secure workload configuration.
• Infrastructure as code and configuration management.
• Linux troubleshooting.
• Observability with metrics, logs, and alerting.
• CI/CD or GitOps-style delivery onto Kubernetes.
• Backup, restore, and recovery for on-premises platforms.
• TCP/IP at the level needed to build and debug cluster networking.
• Root-cause debugging under time pressure.

Additional Information

• Must be willing to work extended hours and/or weekends as needed.
• This role is onsite in Bastrop, TX. Hybrid or remote work is not considered.

Technologies: Kubernetes, Linux, Python, Go, RBAC, TCP/IP

ITAR: To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful permanent resident (green card holder), a Refugee under 8 U.S.C. § 1157, an Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.