6+ years of experience in infrastructure engineering or DevSecOps roles
Hands-on experience with PKI systems and certificate management
Proficient in GCP cloud services including IAM and VPC
Skilled in Infrastructure as Code, preferably with Terraform
Understanding of security concepts such as TLS, mTLS, and secure boot
Experience in CI/CD pipeline security and secrets management
Adaptable to a dynamic environment and can operate independently
Responsibilities
Design and manage the PKI infrastructure for device security
Ensure all devices are cryptographically authenticated and firmware is securely updated
Strengthen GCP infrastructure focusing on security best practices
Develop security tools for vulnerability scanning and incident detection
Implement secure OTA update pipelines for firmware integrity
Automate security configurations using Terraform
Collaborate with firmware engineers to embed security requirements
Contribute to compliance as we prepare for market entry
Benefits
Hybrid work arrangement at the Skip office in San Francisco
Engaging team culture that includes fun events and team activities
Opportunity to contribute significantly to product security from the ground up
Participation in innovative projects involving wearable robotics
Potential for professional growth in a startup environment
Full Job Description
THE ROLE:
We are seeking a highly motivated and adaptable engineer to own the infrastructure and security foundation that a fleet of wearable robots depends on. This means hardening our cloud and device infrastructure from the ground up, and building the PKI and device identity systems that let us ship trusted firmware to thousands of MO/GOs in customers' homes -- safely, verifiably, and at scale.
You'll work closely with our backend and firmware engineers as a core member of our small software team. There's no security org above you, no dedicated platform team below you. You'll be writing the playbook.
Some of the specific responsibilities include, but are not limited to:
Design and operate Skip's PKI infrastructure -- device certificate provisioning, certificate authority management, key lifecycle management, and revocation -- across our device fleet and cloud services
Own device identity and secure boot: ensure every MO/GO that leaves our factory is cryptographically authenticated and that firmware updates can only come from Skip
Harden our GCP infrastructure across networking, IAM, secrets management, and data isolation between Dev and Prod environments
Build and maintain security tooling for secrets management, vulnerability scanning, dependency auditing, and incident detection
Define and implement secure OTA (over-the-air) update pipelines that ensure firmware integrity from signing through delivery to device
Automate infrastructure provisioning and security configuration using Terraform and GCP-native tooling
Partner with firmware engineers to define embedded security requirements -- secure element usage, TrustZone, attestation -- and ensure cloud-side infrastructure meets them
Contribute to compliance readiness as we approach regulated market entry, including audit logging, access controls, and data handling practices
Wear prototypes several hours a week to participate in data collection, test new builds, and provide feedback
Bring joy to the team, participate in embarrassing team events, tolerate KZ's terrible music choices
Basic Qualifications
6+ years of experience in infrastructure engineering, platform security, or a combined DevSecOps role
Hands-on experience designing and operating PKI systems: CA hierarchies, certificate provisioning at scale, key management, and revocation
