Senior Infrastructure Security Engineer

Join Crusoe, a company dedicated to accelerating the abundance of energy and intelligence. As a Senior Infrastructure Security Engineer, you will establish a high-assurance security posture through deep visibility and granular access controls. You will leverage advanced tooling, drive comprehensive Infrastructure Security Posture Management, and build automated security guardrails. You will also operate security-as-a-service platforms, design and maintain authentication controls, and partner closely with infrastructure, platform, and SRE teams to identify and remediate security gaps.

• Conduire la gestion complète de la posture de sécurité des infrastructures (ISPM) et la visibilité cloud-native, en utilisant des outils comme Wiz pour identifier les risques, les dérives et les erreurs de configuration.
• Promouvoir les normes Infrastructure-as-Code (IaC) (par exemple, Terraform) pour appliquer des défauts sécurisés, l'immuabilité et la détection des dérives.
• Construire des garde-fous de sécurité automatisés intégrés directement dans les pipelines CI/CD et de déploiement.
• Experience securing public cloud (AWS, GCP) and/or bare-metal environments
• Strong networking fundamentals, including routing, segmentation, firewalls, and Zero Trust architectures
• Strong knowledge of cryptography, secrets management, PKI, and modern authentication standards
• Deep understanding of security principles across the stack, from Linux and container runtimes to cloud control planes
• Fluency in at least one programming language (Go or Python preferred) for automation and tooling
• 5-8 years of hands-on experience in infrastructure engineering, SRE, or security engineering
• Hands-on experience with Kubernetes and container security, including secure secrets injection into microservices
• Proven experience using Infrastructure-as-Code (Terraform) to manage complex, multi-environment infrastructure at scale
• Background securing high-scale cloud or AI infrastructure
• Experience implementing Zero Trust identity architectures end-to-end
• Familiarity with bare-metal provisioning and data center security considerations
• Experience building or operating internal security platforms (e.g., Vault-as-a-Service)
• Deep experience with Wiz or similar CSPM platforms for enterprise-scale risk management