Member of Technical Staff, Cloud & Infrastructure Security

The role

You will own the cloud, Kubernetes, and GPU infrastructure layers, the software supply chain, and detection and response. You will design security-focused software and platform capabilities to protect customer data, models, and services across multi-cloud infrastructure.

What you will do

• Design and build security-focused software and platform capabilities for encryption, identity, and secure model execution.
• Design and implement tenant isolation across shared GPU and accelerator infrastructure.
• Perform security reviews of cloud-native architectures and build systems for monitoring and automated response.
• Embed security into CI/CD pipelines using a DevSecOps approach.
• Design and develop in-house security tooling and automation.
• Build and operate a vulnerability management program.
• Operate and improve security operations including detection engineering and incident response.
• Participate in red/blue team exercises and tabletop simulations.
• Own the compliance posture for infrastructure and product layers, starting with SOC 2 and ISO 27001.

Required qualifications

• 5+ years of experience in software engineering or security engineering with a focus on security, infrastructure, or cloud-native systems.
• Proficient in Python and/or Go.
• Designing production-grade systems.
• Comfortable automating in Linux environments and in managed CI/CD (e.g., GitHub Actions, Harness, CircleCI).
• Production depth in GCP or AWS, including network segregation, authentication, authorization, encryption, data protection, and intrusion detection.
• Hands-on experience with Kubernetes, Docker, and containerized production environments.
• Working knowledge of modern identity and access controls (SAML, OAuth, OIDC, SSO, RBAC/ABAC), least-privilege design, and workload identity.

Nice to have

• Deep knowledge of Kubernetes internals and native security controls
• Experience designing, operating, and securing large-scale Kubernetes platforms, including control plane security, node hardening, and multi-tenant isolation
• Experience designing, operating, and securing large-scale multi-cloud platforms and zero-trust architectures across AWS, GCP, Azure, Oracle Cloud, and GPU-as-a-service providers
• Proficiency with infrastructure-as-code using Terraform and Python, including experience building modular policy-as-code frameworks
• Experience designing detection engineering pipelines across cloud audit logs, network telemetry, and application signals
• Experience taking a compliance framework such as SOC 2 or ISO 27001 from control design through audit
• Familiarity with container image vulnerability remediation, SBOM generation, and software supply chain security

About the company

Fireworks is a platform for specialized intelligence that enables companies to build, train, and serve AI models. It is a Series D company valued at $17.5 billion.