Information Security Engineer, Bare Metal

About the role

We exist to make humanity more free. Our mission is to deploy frontier compute infrastructure faster than anyone else, ensuring that powerful AI aligns with human values. We're looking for individuals passionate about this mission.

How We Operate

• Extreme Ownership: Take full responsibility for all aspects of your work.
• Velocity: Move quickly and efficiently to drive progress forward.
• First Principles: Start from the basics and challenge every assumption.
• Love of the Game: Embrace the excitement and complexity of pushing the boundaries of AI.

Role Scope

• Own end-to-end security for every server in the bare metal fleet.
• Design and maintain hardened golden OS images with automated vulnerability scanning and patch pipelines.
• Define and enforce the BMC security model, including access control, credential rotation, audit logging, and firmware integrity.
• Partner with network engineering on micro-segmentation, IDS/IPS, and firewall architecture, applying zero-trust from the top-of-rack up.
• Implement data-at-rest encryption, key management, and secure storage access at fleet scale, and build automation to make secure-by-default the default.
• Lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents affecting the physical fleet.

What We're Looking For

• Experience in information security or infrastructure engineering with a strong focus on bare metal, IaaS, or high-scale cloud infrastructure.
• Deep expertise in Linux security (SELinux, AppArmor, kernel-level security) and network security (TCP/IP, VPNs, firewall rulesets, zero-trust).
• Strong background in encryption, including disk-level (LUKS) and hardware-level encryption, and understanding of HSMs and trusted computing (TPM/TXT).
• Fluency in automation tools such as Python, Go, or Rust, with configuration management (Ansible, Puppet, Chef).
• Ability to communicate security decisions clearly and work effectively across engineering teams.
• Bonus points for experience with BMC platforms (OpenBMC, iDRAC, iLO), hardware root of trust, and secure boot, as well as compliance standards like SOC 2, ISO 27001, and FedRAMP.
• Professional certifications such as CISSP, OSCP, or CEH are a plus.

Salary & Benefits

Competitive total compensation package (salary + equity). Includes retirement or pension plan, health, dental, and vision insurance, and generous PTO policy. The base salary range for this position is $230,000 - $310,000 per year, depending on experience, skills, qualifications, and location. Fluidstack is committed to pay equity and transparency. We are an Equal Employment Opportunity Employer and comply with all laws regarding hiring and employment practices.