Infrastructure Security Engineer

The role

You will secure the platform used to train and serve AI models. This involves Kubernetes platform security, cloud identity and access, software supply chain, and research infrastructure.

What you will do

• Design and ship security controls in the Kubernetes ecosystem
• Harden the software supply chain from dependency intake through build and deploy
• Own cloud IAM and identity architecture
• Secure research infrastructure and training pipelines
• Threat model new platform components
• Build guardrails for AI agents and developer tooling
• Write infrastructure as code and policy as code
• Provide incident response teams with information about systems

Required qualifications

• Hands-on experience securing Kubernetes in production
• Working knowledge of cloud IAM and networking on at least one major cloud platform
• Experience with infrastructure as code and GitOps-style deployment
• Comfort writing Python, Typescript, Rust or another language to build tooling
• An understanding of software supply chain attacks and the controls that stop them
• Clear writing
• Judgment about which controls to enforce and how to roll out changes

Nice to have

• Experience securing GPU or HPC-style compute, training pipelines or research environments
• Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar)
• Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries
• Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments
• Open source contributions or published work in cloud or Kubernetes security

About the company

Runway is building AI to simulate the world through merging art and science. The team aims to build world models that experience the world and learn from mistakes.