Crusoe · 1 month ago
Staff Infrastructure Security Engineer
San Francisco, CA - US
Full-time
Onsite
Senior Level, Lead/Staff
6+ years expCrusoe is focused on accelerating the abundance of energy and intelligence through sustainable technology. They are seeking a Staff Infrastructure Security Engineer to architect and deploy foundational security services that support a Zero Trust model, while also leading the integration of security practices across engineering teams.
AI InfrastructureArtificial Intelligence (AI)Data CenterEnergyEnergy ManagementOil and Gas
Responsibilities
Architect a highly available, disaster-resilient, and scalable multi-cluster secrets management platform that serves as the foundation for the organization’s Zero Trust strategy
Drive consensus across Cloud Engineering, DevOps, and SRE teams to define standardized secret management workflows and integrate security patterns into the SDLC
Ensure the platform design meets rigorous internal policies and external compliance frameworks (e.g., SOX, ISO 27001)
Design and implement advanced governance controls, including Sentinel Policy as Code, to automate security guardrails and access decisions
Lead the engineering of the Vault infrastructure using Terraform, ensuring all deployments are reproducible, version-controlled, and automated
Architect the integration between the secrets platform, Identity Providers (Okta), and workload identities (Kubernetes Service Accounts) to establish robust machine-to-machine authentication
Configure and tune essential secrets engines (KV, Transit, KMIP) and Enterprise features (Performance Replication, Seal automation) to support diverse engineering use cases
Operationalize the platform by building self-service mechanisms, distinct "paved road" onboarding procedures, and documentation that allows engineering teams to easily consume security services
Implement comprehensive monitoring, alerting, and audit logging to ensure platform health, provide visibility into usage patterns, and satisfy audit requirements
Own the full operational lifecycle of the production environment, including patching, version upgrades, backup/restore procedures, and incident response runbooks
Qualification
Required
6+ years (or equivalent) hands-on experience in cloud security, DevOps, or infrastructure engineering
Deep expertise and proven track record deploying and managing HashiCorp Vault in an enterprise environment
Expert-level knowledge of Secrets Management, X.509 PKI (Public Key Infrastructure), Certificate Authority Operations, and Cryptography concepts
Strong experience with Google Cloud Platform (GCP) and cloud native identity and access management (IAM)
Proficiency with Infrastructure as Code (IaC) tools, especially Terraform, for automating the deployment and configuration of Vault and its dependent infrastructure
Fluent in at least one programming language (ideally Go or Python)
Demonstrable experience with Kubernetes and container security principles, especially integrating secrets into microservices architectures
Strong understanding of network security concepts (IP addressing, IP routing, firewalls, segmentation, Zero Trust)
Preferred
Experience with the Enterprise edition of HashiCorp Vault is highly preferred
Benefits
Industry competitive pay
Restricted Stock Units in a fast growing, well-funded technology company
Health insurance package options that include HDHP and PPO, vision, and dental for you and your dependents
Employer contributions to HSA accounts
Paid Parental Leave
Paid life insurance, short-term and long-term disability
Teladoc
401(k) with a 100% match up to 4% of salary
Generous paid time off and holiday schedule
Cell phone reimbursement
Tuition reimbursement
Subscription to the Calm app
MetLife Legal
Company paid commuter benefit; $300 per month
Company
Crusoe
Crusoe is a vertically integrated AI infrastructure company that builds and operates data centers powered by energy sources.
1001-5000 employees
H1B Sponsorship
Crusoe has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (69)
2024 (14)
2023 (2)
2022 (1)
2021 (1)
Funding
Current Stage
Late StageTotal Funding
$3.9BKey Investors
Victory Park CapitalBrookfield Asset ManagementUpper90
2025-12-19Secondary Market
2025-10-23Series E· $1.4B
2025-08-25Debt Financing· $175M
Leadership Team
Chase Lochmiller
Co-Founder and Chief Executive Officer
Cully Cavness
Co-Founder, President and Chief Strategy Officer
Recent News
2026-01-08
Crunchbase News
2026-01-06
globalventuring.com
2025-12-31
Company data provided by crunchbase