Remote
Infrastructure Security Engineer
О роли
Описание вакансии
About the company
- Runway builds AI to simulate the world by merging art and science
- World models at the frontier of AI progress
- Offices in New York, San Francisco, Seattle, London, Paris, and Tel Aviv; remote hiring open
Responsibilities
- Design and ship security controls in the Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy, runtime hardening
- Harden the software supply chain: package firewalling, artifact signing and provenance, admission controls
- Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials, workload federation
- Secure research infrastructure and training pipelines, including access to model weights and datasets
- Threat model new platform components and turn findings into requirements
- Build guardrails for AI agents and developer tooling
- Write infrastructure as code and policy as code
- Support incident response with fast answers about infrastructure
Requirements
- Hands-on experience securing Kubernetes in production: admission policies, RBAC, workload identity
- Working knowledge of cloud IAM and networking on a major cloud platform, identity federation and short-lived credentials
- Experience with infrastructure as code and GitOps-style deployment
- Comfort writing Python, TypeScript, Rust or another language to build tooling
- Understanding of software supply chain attacks and controls: signing, provenance, SBOMs, admission enforcement
- Clear writing for design docs, threat models and explanations
- Judgment about which controls to enforce and how to roll out breaking changes
Nice to have
- Securing GPU or HPC-style compute, training pipelines or research environments
- Policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco)
- Multi-tenant isolation design: ABAC, scoped credentials, per-tenant boundaries
- Security architecture evidence for SOC 2, ISO 27001 or audits
- Open source contributions in cloud or Kubernetes security
Стек и навыки
С чем работаем