{"id":54748,"url":"https://alion.io/job/thinking-machines-lab-infrastructure-engineer-security","title":"Infrastructure Engineer, Security","company":{"id":14382,"name":"Thinking Machines Lab","domain":"thinkingmachines.ai","url":"https://alion.io/company/thinking-machines-lab","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":300000,"max":400000,"currency":"USD","period":"year","gross":null,"usd_annual":400000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"HPC","optional":true},{"name":"TPU","optional":true}],"status":"live","first_seen_at":"2026-08-04T18:05:00Z","employer_posted_date":"2026-08-04","last_verified_at":"2026-10-17T08:51:59Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"About Thinking Machines\nThe mission of Thinking Machines is to build AI that extends human will and judgment. We are training frontier models with Inkling, developing Tinker to let people make models their own, and crafting interfaces that broaden human-AI communication. We believe the future worth building is human, and we're hiring people who want to build it.\nAbout the Role\nWe’re looking for an infrastructure engineer to own and evolve the security infrastructure that underpins our foundation models. In this role, you’ll work across compute, storage, networking, and data platforms, making sure our systems are secure, reliable, and built to scale. You’ll shape controls, architecture, and tooling so that security is part of how the platform works by default. You’ll partner closely with research and product teams, enabling them to move quickly while keeping our models, data, and environments protected.\nNote: This is an \"evergreen role\" that we keep open on an on-going basis to express interest. We receive many applications, and there may not always be an immediate role that aligns perfectly with your experience and skills. Still, we encourage you to apply. We continuously review applications and reach out to applicants as new opportunities open. You are welcome to reapply if you get more experience, but please avoid applying more than once every 6 months. You may also find that we put up postings for singular roles for separate, project or team specific needs. In those cases, you're welcome to apply directly in addition to an evergreen role.\nWhat You’ll Do\nArchitect security patterns for platforms and services, including network segmentation, service-to-service authentication, RBAC, and policy enforcement in Kubernetes and cloud environments.\n\nManage identity, access, and secrets for humans and services: workload and cross-cloud identity, least-privilege IAM, and secrets management.\n\nBuild secure platforms for data ingestion, processing, and curation: classification, encryption, access controls, and safe sharing patterns across teams.\n\nWrite threat models and review designs with researchers and engineers to help them ship features and experiments in a safe, scalable way.\n\nAutomate security checks and build guardrails: policy-as-code, secure infrastructure baselines, validation in CI/CD, and tools that make the secure path the easiest one.\n\nSkills and Qualifications\nMinimum qualifications:\nBachelor’s degree or equivalent experience in engineering, or similar.\n\nStrong background with containers and orchestration (e.g., Kubernetes) and how to secure them (namespaces, network policies, pod security, admission controls, etc.)\n\nPractical experience with Infrastructure as Code (Terraform or similar), including secure patterns for provisioning networks, IAM, and shared services.\n\nSolid understanding of cloud networking and security: VPCs, load balancers, service discovery, mTLS, firewalls, and zero-trust-style architectures.\n\nProficiency with a systems language such as Rust and scripting in Python for building platform components and internal tools.\n\nEvidence of owning complex, production-critical systems, including debugging issues that span infra, security, and application layers.\n\nPreferred qualifications - we encourage you to apply if you meet some even if you don't meet all of these:\nExperience with ML infrastructure, GPU clusters, or large-scale training environments (schedulers, job queues, shared storage, multi-tenant clusters).\n\nBackground in AI labs, HPC environments, or ML-heavy organizations where both security and performance are first-class concerns.\n\nExperience profiling and tuning high-throughput systems, and an ability to reason about the cost of additional security layers.\n\nTalks, blogs, or publications on infrastructure security, distributed systems, or performance engineering.\n\nOpen-source contributions to security, orchestration, observability, or infrastructure tooling.\n\nFamiliarity with securing specialized hardware (GPUs, TPUs) and their integrations into training and inference pipelines.\n\nLogistics\nLocation: This role is based in San Francisco, California.\n\nCompensation: Depending on background, skills and experience, the expected annual salary range for this position is $300,000 - $400,000 USD.\n\nVisa sponsorship: We sponsor visas. While we can't guarantee success for every candidate or role, if you're the right fit, we're committed to working through the visa process together.\n\nBenefits: Thinking Machines offers generous health, dental, and vision benefits, unlimited PTO, paid parental leave, and relocation support as needed.","description_format":"text","description_chars":4629,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Multimodal AI","Foundation Models","AI Research Labs","AI Development Tools"],"lifecycle":[{"event":"open","at":"2026-08-04T18:05:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 30","filings_12m":30,"filings_prev_12m":8,"green_card_filings_12m":0,"median_offered_wage_usd":192500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":7}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.359,"p_room":0.28,"age_days":73,"expected_fill_days":29,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":400000,"is_top_pay":true},"html_url":"https://alion.io/job/thinking-machines-lab-infrastructure-engineer-security","json_url":"https://alion.io/job/thinking-machines-lab-infrastructure-engineer-security.json","meta":{"generated_at":"2026-10-17T09:33:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12546,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14382},"rest":"https://alion.io/mcp/rest/get_company?id=14382"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthinking-machines-lab-infrastructure-engineer-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthinking-machines-lab-infrastructure-engineer-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthinking-machines-lab-infrastructure-engineer-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/thinking-machines-lab-infrastructure-engineer-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthinking-machines-lab-infrastructure-engineer-security"}]}