Infrastructure Security Engineer

Stack

Responsibilities

• ▹Design and ship security controls in the Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy and runtime hardening
• ▹Harden the software supply chain from dependency intake through build and deploy: package firewalling, artifact signing and provenance, blocking admission controls
• ▹Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials and workload federation
• ▹Secure research infrastructure and training pipelines, including access to model weights and datasets
• ▹Threat model new platform components before they ship and turn findings into concrete requirements
• ▹Build guardrails for AI agents and developer tooling operating inside the infrastructure
• ▹Write infrastructure as code and policy as code with the same review and rollout discipline as any other change
• ▹Support the incident response team when infrastructure is involved

Requirements

• ▹Hands-on experience securing Kubernetes in production: writing admission policies, debugging RBAC and workload identity problems, understanding how a cluster gets compromised
• ▹Working knowledge of cloud IAM and networking on at least one major cloud platform, including identity federation and short-lived credentials

What we offer

• ▹Open to remote hiring (offices in New York, San Francisco, Seattle, London, Paris, Tel Aviv)

About the company

Runway is building AI to simulate the world by merging art and science, believing world models are at the frontier of AI progress.