Infrastructure Security Engineer
Runway · Remote · Remote ·
COMPENSATION
$240k – $290k
Listed on the employer's job board (Ashby)
- Fully remote or hybrid
- Kubernetes security focus
- Cloud IAM & Identity
- Supply chain hardening
- Python/TS/Rust coding
Runway is building AI world models that simulate reality to accelerate progress in robotics, science, and storytelling. As an Infrastructure Security Engineer, you will protect the platform where these frontier video models are trained and served, addressing unique challenges in research compute and fast-moving build pipelines.
This hands-on position requires writing policy and infrastructure code to enforce security controls across clusters. You will work closely with platform teams to secure tenant isolation, manage cloud identity, and safeguard the software supply chain without hindering engineering velocity.
What you'll do
- Design and ship security controls for Kubernetes, including admission policy and RBAC
- Harden software supply chain via artifact signing, provenance, and package firewalling
- Manage cloud IAM architecture with least-privilege roles and short-lived credentials
- Secure research infrastructure and training pipelines for model weights and datasets
- Threat model new platform components and translate findings into actionable requirements
- Build guardrails for AI agents and developer tooling within the infrastructure
- Write infrastructure and policy as code with strict review and rollout discipline
- Support incident response with rapid system insights and containment strategies
What you'll need
- Proven experience securing production Kubernetes clusters and debugging RBAC issues
- Working knowledge of cloud IAM, networking, and identity federation on major clouds
- Experience with infrastructure as code and GitOps-style deployment pipelines
- Proficiency in Python, Typescript, Rust, or similar languages for building tooling
- Understanding of supply chain attacks and controls like SBOMs and admission enforcement
- Strong written communication skills for design docs and cross-team explanations
- Judgment in enforcing controls and rolling out changes without disrupting operations
Nice to have
- Experience securing GPU/HPC compute or research training environments
- Familiarity with policy engines like Kyverno, OPA Gatekeeper, or Falco
- Knowledge of multi-tenant isolation design and scoped credentials
- Experience producing security evidence for SOC 2 or ISO 27001 audits
- Open source contributions or published work in cloud security
Stack
- Kubernetes
- Python
- Typescript
- Rust
- Kyverno
- OPA Gatekeeper
- Falco
How you'll work
- Open to hiring remote candidates worldwide
- Offices located in New York, San Francisco, Seattle, London, Paris, Tel Aviv
- Hands-on engineering role within the Security team