Sr. Security Engineer (Infrastructure)

SpaceX’s Information Security team is looking for a senior engineer to help design, secure, and operate on-premises Kubernetes infrastructure that supports enterprise systems. In this role, you will harden clusters and workloads, automate core platform operations, and lead durable remediation work for the hardest production incidents.

This is an onsite position based in Bastrop, Texas, focused on building secure Kubernetes foundations and ensuring the platform is supportable, scalable, repeatable, and maintainable.

Responsibilities

• Design on-premises Kubernetes platforms that security services run on, including the compute, storage, and networking dependencies.
• Lead cluster lifecycle work such as upgrades, capacity planning, failure domains, and safe change management.
• Build automation used by other engineers to provision, configure, and operate the platform.
• Set standards for how security services are deployed, hardened, and run on Kubernetes.
• Harden clusters and workloads using controls such as RBAC, policy, secrets, and secure configuration.
• Respond to the most difficult production incidents and drive issues to a durable fix.
• Define signals, alerts, and operational practices that keep the platform supportable.
• Document platform operations and advise other teams on how the systems run.
• Identify systemic security and IT gaps, then ship platform and deployment changes that reduce risk.
• Coordinate with information security, IT, software, and other partners to deliver reliable security outcomes.
• Deliver solutions that are scalable, repeatable, maintainable, and secure.

Requirements

• Bachelor’s degree in computer science or another STEM discipline; or 2+ years of professional experience operating production infrastructure plus a high school diploma or equivalency certificate in lieu of a degree.
• 5+ years of experience operating on-premises Kubernetes in a production environment.
• 5+ years of experience with Linux system administration and with Python, Go, or another language used to automate infrastructure.

Preferred Skills and Experience

• Production Kubernetes at scale, including control plane, networking, storage, RBAC, and upgrades.
• Experience designing on-premises compute, storage, and network architectures for container platforms.
• Cluster and node hardening, admission control, and secure workload configuration.
• Infrastructure as code and configuration management.
• Python or Go for platform tooling and automation.
• Linux internals and troubleshooting skills.
• Observability, alerting, and operational readiness for production platforms.
• Experience with CI/CD or GitOps-style delivery onto Kubernetes.
• Capacity planning, failure domains, and recovery for on-premises platforms.
• TCP/IP knowledge at the level needed to build and debug cluster networking.
• Root-cause debugging under time pressure.

Technologies

• Kubernetes
• Linux
• Python
• Go
• RBAC
• CI/CD
• GitOps
• TCP/IP

Additional Information

• Must be willing to work extended hours and/or weekends as needed.
• Onsite work is required. Hybrid or remote work will not be considered.
• Location: Bastrop, TX.

ITAR Requirements

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.