5-7 years of experience in security architecture and operations
Proven track record in designing and managing production virtualization and clustered storage platforms
Experience with PKI and automated certificate lifecycle management
Strong background in database high availability and recovery processes
Ability to integrate identity systems for seamless provisioning and deprovisioning
Proficient in coding and scripting as part of daily responsibilities
Familiarity with video management and access control platforms is a plus
Responsibilities
Design and implement the security control plane from the ground up
Operate the control plane across multiple sites, balancing on-premises and cloud solutions
Manage PKI, certificate lifecycle, and automated access deprovisioning
Develop integrations and monitoring systems for proactive site management
Transform traditional security practices into reproducible and recoverable infrastructure
Oversee backup, disaster recovery, and non-production environments for testing changes
Benefits
Opportunity to build a security program from scratch
Work on cutting-edge technology in AI and infrastructure security
Be part of a team that values innovative solutions over traditional methods
Engage in a role with significant responsibility and impact
Flexible work environment with a focus on resilience and scalability
Full Job Description
The Security Team
Examples of key problems the team is working on
You're securing the frontier of AI. The model weights training on our infrastructure are the most valuable and most targeted artifacts in technology, and we're standing up the compute to hold them faster than anyone ever has. A breach isn't a leak, it's the frontier walking out the door.
Build the entire security program from scratch. Most leaders inherit someone else's system and spend a career patching it. Here you own it end to end, bare metal to boardroom, as we scale across continents.
The industry's playbook was written for one building at a time. Vendor-managed appliances, manual process, and standards that assume a security team walks the floor. None of that survives contact with what we're building, so we build what should exist rather than buying what does.
Your threat surface is measured in gigawatts. The customers running on our infrastructure are building the most consequential technology in human history, and being responsible for the physical and logical security of that work makes everything else feel small.
Role Scope
Design the security control plane end to end and make the architecture decisions the rest of the platform locks against, before the first campus depends on them.
Build and operate that control plane at every site, on premises where resilience and bandwidth demand it, with a thin management layer in the cloud where that serves better.
Own PKI, certificate lifecycle, identity integration, and automated deprovisioning, so access ends the moment employment does rather than at the next audit.
Build the integrations, APIs, and monitoring that tell you a site is degrading before anyone files a ticket, on an estate adding campuses faster than any manual model can track.
Reject the hand-built, appliance-per-site, vendor-managed pattern the physical security industry treats as normal, and replace it with infrastructure that is versioned, reproducible, and recoverable.
Own backup, disaster recovery, and the non-production environment where changes are proven before they reach a live site.
What We're Looking For
The below is a starting point. We always make space for exceptional people, so if you don't fit this role exactly, tell us where you would.
You've designed and run a production virtualization and clustered storage platform, and you can walk through a failover you actually tested rather than one you assumed would work.
You've been the design authority on an architecture other people built against, and you can name a decision you got wrong and what it cost to unwind.
You've owned database high availability and recovery, and you've restored from your own backups rather than trusting that they ran.
You run PKI and certificate lifecycle as automation, so expiry is a solved problem rather than something that pages you at 2am.
You've integrated identity systems so provisioning and deprovisioning happen without a human in the loop.
You've replaced a vendor-managed or hand-built system with something reproducible, and you can explain what the accepted approach gets wrong and why.
You write code and scripts as a normal part of the job, not as an occasional exception.
Bonus: Video management and access control platforms (Genetec Security Center, Milestone, Lenel). Enterprise virtualization and clustered storage (Hyper-V, VMware vSphere, Nutanix, failover clustering). Database high availability (SQL Server Always On, clustering). Cloud management planes (AWS). Infrastructure as code (Terraform, Ansible, PowerShell DSC).
We are committed to pay equity and transparency.
You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you did not receive a confirmation email, please email [redacted] with your resume/CV, the role you've applied for, and the date you submitted your application-- someone from our recruiting team will be in touch.
