{"id":2211360,"url":"https://alion.io/job/xai-infrastructure-security-engineer-bare-metal-platform","title":"Infrastructure Security Engineer (Bare Metal & Platform)","company":{"id":28,"name":"xAI","domain":"x.ai","url":"https://alion.io/company/xai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":95,"ghost_share":0,"stale_share":0.505,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Palo Alto, United States","New York, United States","Seattle, United States","Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":258000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Azure AKS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Configuration Management","optional":false},{"name":"DNS","optional":false},{"name":"GDPR","optional":false},{"name":"Go","optional":false},{"name":"Google GKE","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"Puppet","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Grafana","optional":true},{"name":"OpenStack","optional":true},{"name":"Prometheus","optional":true},{"name":"Proxmox VE","optional":true},{"name":"VMWare","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-10-10T01:45:54Z","employer_posted_date":"2026-10-10","last_verified_at":"2026-10-13T05:47:47Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. \nSpaceXSI is building Super Intelligence to understand the universe and help expand humanity’s knowledge and capabilities. We work across the full Super Intelligence stack: compute (Colossus supercomputers), models (Grok), and applications (Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X). We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.\nABOUT THE ROLE:\nWe are seeking a hands-on Infrastructure Security Engineer to build and secure SpaceXAI’s infrastructure from the bare-metal layer up through the platform and application stack. In this role, you will design, implement, and harden physical and private-cloud foundations-servers, networks, identity, and orchestration-and carry that security posture into containers, automation, and hybrid connectivity with public cloud.\nThis role focuses on securing critical infrastructure spanning data centers, colo, and hybrid environments, with work that may span platforms such as SpaceXAI, X Social, X Money, and related systems. You’ll operate with an automation-first mindset: building secure foundations at the metal and OS layer, hardening platforms at scale, and partnering closely with engineering so security is embedded in how we build and run systems-not bolted on after the fact.\nRESPONSIBILITIES:\nBare metal, data center & network security\nDesign and implement secure bare-metal and private-cloud architectures (servers, storage, out-of-band management, BIOS/UEFI/BMC firmware posture)\nHarden physical and virtual fleets: OS baselines (Linux/Windows), CIS benchmarks, patch and vulnerability management, and secure boot / measured boot where applicable\nHands-on firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security\nBuild and secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware\nOwn hybrid connectivity between on-premises and cloud (site-to-site VPN, Direct Connect / Interconnect / ExpressRoute, SD-WAN, zero-trust access)\nManage identities and privileged access across Active Directory / LDAP / Kerberos and cloud IAM (federation, SAML/OIDC, PAM)\nAssist with security assessments and audits of physical, on-premises, and hybrid infrastructure\nMonitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)\nPlatform, containers & developer enablement\nDesign and implement secure container and Kubernetes standards on bare metal and private cloud (not only managed EKS/GKE/AKS), including RBAC, network policy, and secrets\nDevelop and maintain Infrastructure as Code and configuration management-especially Puppet-with embedded security controls for physical and virtual fleets\nCollaborate with development teams so security best practices are integrated into CI/CD pipelines\nSecure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms\nDetection, operations & tooling\nMonitor and respond to security events and incidents spanning bare metal, network devices, hosts, and hybrid cloud\nMaintain SIEM data pipelines that ingest on-premises network, host, and cloud telemetry for reliable alerting\nBuild, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet\nDevelop dashboards and alerts from security metrics across physical and platform layers\nDevelop and maintain infrastructure security policies, standards, and procedures from metal through platform\nOwn security projects end to end: identify issues and implement solutions\nStay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure\nBASIC QUALIFICATIONS:\nBachelor's degree in Computer Science, Cybersecurity, or a related field\n3-5 years of experience in infrastructure security, platform security, or related hands-on roles\nProven experience securing bare-metal, data-center, or private-cloud environments (not cloud-only resumes)\nHands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security\nStrong proficiency with Puppet for configuration management and fleet hardening in production\nStrong understanding of network security concepts and protocols, including hands-on work with firewalls, segmentation, and hybrid connectivity\nExperience with hybrid identity (AD/LDAP or similar) integrated or federated with cloud IAM\nExperience with Infrastructure as Code (e.g., Terraform) applied to physical or VM fleets\nFamiliarity with containerization and Kubernetes security implications, including on-premises or bare-metal clusters\nExperience with languages (e.g., Python, Bash and Golang) for automation and tool development\nFamiliarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)\nExperience in banking, money transmission, P2P payments, or similarly regulated financial platforms\nProactive mindset with strong ownership, critical thinking, and problem-solving skills\nLocated in the SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office\nPREFERRED SKILLS AND EXPERIENCE:\nDeep expertise operating and securing physical server fleets, colo, or private cloud (VMware, OpenStack, Proxmox, Nutanix, or similar)\nRelevant security certifications (e.g., CCSP, CSSK, OSCP, network or cloud security specialty)\nStrong proficiency with Python and Terraform on production fleets\nDeep expertise in Kubernetes and container security on bare metal or private cloud\nExperience with multi-cloud and cloud-to-on-prem security\nKnowledge of CI/CD best practices and tools; hands-on GitHub Actions or equivalent\nExperience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)\nExperience building custom security tools or integrations\nInterest in leveraging AI for infrastructure security monitoring and automation\nContributions to open-source infrastructure or security projects\nExperience securing AI/ML and GPU workloads on bare metal or hybrid infrastructure\nCOMPENSATION AND BENEFITS:\n$100,000 - $258,000 USD\nBase salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.\nSpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.","description_format":"text","description_chars":6929,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["LLM & Generative AI","Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-10-10T03:12:21Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":59,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/xai-infrastructure-security-engineer-bare-metal-platform","json_url":"https://alion.io/job/xai-infrastructure-security-engineer-bare-metal-platform.json","meta":{"generated_at":"2026-10-13T06:08:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9579,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":28},"rest":"https://alion.io/mcp/rest/get_company?id=28"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxai-infrastructure-security-engineer-bare-metal-platform"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxai-infrastructure-security-engineer-bare-metal-platform"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxai-infrastructure-security-engineer-bare-metal-platform"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xai-infrastructure-security-engineer-bare-metal-platform\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxai-infrastructure-security-engineer-bare-metal-platform"}]}