Senior/Staff Infrastructure Security Engineer

Crusoe Energy is on a mission to unlock value in stranded energy resources through the power of computation.

Take a look at what we do! - https://www.youtube.com/watch?v=Rlt8k71Quqw 

We aim to align the long term interests of the climate with the future of global computing infrastructure. As data centers consume an exponentially growing power footprint to deliver technology to all connected devices, we are inspired by making sure that the energy meeting that demand is sourced in an environmentally responsible fashion. Crusoe co-locates mobile data centers with stranded energy resources, like flare gas and underloaded renewables, to deliver low-cost, carbon-negative distributed computing solutions. Crusoe Cloud is a managed cloud services platform powered by stranded energy that enables climate-friendly innovation in computationally intensive fields including artificial intelligence, graphics rendering and computational biology.

About This Role:

Crusoe Security & Compliance is hiring a Senior/Staff Security Infrastructure Engineer to play a critical role in securing our infrastructure across large on-premise and cloud environments. You will be responsible for implementing and maintaining robust security configurations and policies, conducting regular security assessments, and collaborating with various teams to integrate security into all stages of the infrastructure lifecycle. This role is crucial in protecting against threats, detecting unauthorized or anomalous behavior, and ensuring the security of Crusoe Cloud.

A Day in the Life:

• Ensure secure infrastructure architecture across large on-premise digital environments, compute, storage, and networking, as well as cloud environments.

• Implement and maintain robust security configurations and policies to protect against threats and ensure compliance with industry standards.

• Implement and maintain security tooling, including privileged access and just-in-time access systems with zero-trust principles. 

• Conduct regular security assessments and audits of infrastructure to identify vulnerabilities and areas for improvement.

• Develop and enforce security best practices for infrastructure automation and orchestration, ensuring secure and repeatable methods of working.

• Review and secure infrastructure as code to maintain the integrity of our systems.

• Develop and maintain automation scripts and tools to streamline security operations and improve efficiency.

• Continuously evaluate and improve security processes, workflows, and tools to ensure optimal performance and effectiveness.

• Build and maintain core security tooling documentation for internal self-service use and reference.

• Collaborate with infrastructure engineering, SRE, and product teams to integrate security into all stages of the infrastructure lifecycle, ensuring secure deployments at scale.

• Participate in engineering design discussions from a security perspective, providing expertise to ensure secure architectures.

You Will Thrive In This Role If:

• Minimum 6 years of proven experience as a Security Engineer with a focus on infrastructure security.

• Excellent communication skills, with the ability to clearly explain technical concepts and their implications to both technical and non-technical stakeholders.

• Demonstrated ability to influence security strategies and drive improvements within an organization.

• Strong understanding of network protocols, architectures, and security controls.

• Minimum of 6 years working with Linux.

• Proficiency in Kubernetes.

• Proficiency in Go and/or Python. 

• Experience with CI/CD tools and approaches.

• Familiarity with modern infrastructure tools, such as Docker, Kubernetes, Ansible, Cloud Formation, Terraform.

• Experience in a DevSecOps environment, integrating security into CI/CD pipelines.

• Strong understanding of zero-trust architecture and implementation.

• Demonstrated experience contributing to technical and procedural documentation and policies.

• Experience building and scaling open source security observability solutions. 

• Self-motivated, with good communication and writing skills.

• Must be able to pass a background check

• Embody the Company values

Benefits:

• Hybrid work sched