[Hiring] Senior Engineer, Platform Security and Reliability @Kairos Power

Role Description

Kairos Power is looking for a Senior Platform Security and Reliability Engineer to work within a small software and infrastructure team that supports the needs of our design, research, and development organizations. This is a hands-on individual contributor role. You will own the security baseline and the reliability posture of the cloud and high-performance computing platforms that engineering teams depend on, and you will build the controls, automation, and recovery mechanisms that keep those platforms both defensible and dependable.

You will set technical direction for platform security controls across AWS and Google Cloud, for identity and secrets management, for machine image security, for network security, and for observability architecture. You will lead the migration of legacy cloud workloads and the retirement of duplicative services, and you will own the cost visibility and resource guardrails that keep cloud and high-performance computing spend predictable. You will lead response to both availability and security incidents, and communicate clearly with the engineers and stakeholders who depend on these services. The group favors simple, proportionate designs assembled from standard, well-supported technologies, and this role is expected to be a leading voice for that standard. Success means becoming the trusted technical owner of platform security and reliability, with systems that can be operated and maintained by engineers other than their original author.

Responsibilities

• Define, implement, and maintain the security baseline for cloud and Linux platforms.
• Own platform security controls in AWS and Google Cloud.
• Design and enforce least-privilege access patterns.
• Own the security of machine image pipelines.
• Assess new platform technologies for security impact.
• Own identity and access management across cloud and self-hosted services.
• Manage the full lifecycle of secrets.
• Own certificate lifecycle.
• Automate access provisioning and deprovisioning.
• Translate internal security requirements into automated checks.
• Build and maintain resource inventory and configuration data.
• Automate the collection of control evidence.
• Track identified findings to closure.
• Define service health indicators and service-level objectives.
• Engineer automated recovery and self-healing.
• Own backup, restoration, and disaster recovery for critical services.
• Lead response to availability and security incidents.
• Run blameless post-incident review.
• Own the observability architecture for platform services.
• Build and maintain dashboards in AWS Managed Grafana.
• Design and operate secure networking for self-hosted and cloud services.
• Own ingress and egress control for engineering environments.
• Lead migration of legacy cloud workloads.
• Drive retirement and consolidation of unsupported services.
• Own cloud and high-performance computing cost visibility.
• Write, test, and maintain platform and security automation.
• Lead infrastructure design review and code review.
• Mentor engineers and transfer knowledge.
• Evaluate build-versus-buy decisions.
• Collaborate with nuclear and other non-software engineers.

Qualifications

• Bachelor’s degree in computer science, engineering, physics, mathematics, or a related technical field, or equivalent practical experience.
• 5+ years of relevant experience in platform, infrastructure, cloud, security, site reliability engineering, or a related field.
• Demonstrated experience designing, securing, and operating production cloud infrastructure.
• Strong Linux systems experience.
• Experience with infrastructure automation.
• Experience implementing platform security controls.
• Experience designing and operating monitoring, recovery, and incident-response capabilities.
• Demonstrated ability to design maintainable infrastructure.

Desired Qualifications

• Experience with Google Cloud.
• Experience with cloud cost management.
• Experience securing high-performance computing environments.
• Experience with container security.
• Experience operating self-hosted engineering services.
• Experience with vulnerability management and patch automation.
• Experience automating control evidence against an established security control framework.
• Experience supporting scientific or engineering computing users.
• Advanced degree in a related technical field.

Knowledge, Skills & Abilities

• Knowledge of networking fundamentals.
• Knowledge of platform security principles.
• Ability to translate security, reliability, and operational requirements into practical, automated technical controls.
• Ability to use monitoring, logging, metrics, and service health indicators.
• Ability to assess technical risk and prioritize remediation.
• Ability to work with a highly collaborative team.
• Ability to solve problems quickly and efficiently.
• Ability to proactively collect, manage and transfer knowledge.
• Ability to create efficiencies when working on problems.
• Ability to exercise architectural judgment.
• Ability to weigh security risk against engineering cost.
• Ability to give direct technical feedback.
• Ability to communicate clearly during incidents.
• Ability to take operational ownership of systems.
• Excellent written and verbal communication.
• Ability to select simple and proportionate designs.

Physical Conditions

• Remaining in a stationary position, often standing, or sitting for prolonged periods.
• Moving about to accomplish tasks or moving from one worksite to another.
• Communicating with others to exchange information.

Environmental Conditions

• Remote work.
• General office environment.
• High-concentration, demanding and fast-paced.

Travel

• Some travel may be required for workshops and project assistance.

Additional Requirements

• Occasionally requires working weekends.
• Occasionally requires schedule flexibility.
• Occasionally requires extended hours to support launch and critical project timelines.

Benefits

• Competitive compensation packages.
• Medical, dental and vision benefits for employees and their dependents.
• Paid Vacation.
• 401(k) and pre-tax health insurance, dependent care, and commuter benefits (FSA).