Infrastructure Security Engineer

Join Runway, a cutting-edge AI company, as an Infrastructure Security Engineer. In this hands-on role, you'll be responsible for securing our Kubernetes platform, cloud identity and access, software supply chain, tenant isolation, and research infrastructure. You'll design and implement security controls, threat model new components, and support the incident response team. Enjoy benefits like unlimited PTO, 100% medical coverage, and a $600 annual stipend for personal or professional development.

• Design and implement security controls in the Kubernetes ecosystem, including admission policies, RBAC, workload identity, network policies, and runtime hardening.
• Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing, and provenance.
• Own cloud IAM and identity architecture, ensuring least-privilege roles, short-lived credentials, and workload federation.

• Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised
• An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement
• Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else
• Judgment about which controls to enforce, which to recommend and how to roll out a breaking change without breaking the company
• Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work
• Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts
• Clear writing. Design docs, threat models and explanations to engineers who don't work in security are all part of the job
• Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries
• Experience securing GPU or HPC-style compute, training pipelines or research environments
• Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar)
• Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments
• Open source contributions or published work in cloud or Kubernetes security