Security Engineer, Infrastructure Security

Role Overview

OpenAI is seeking a Security Engineer to join the Infrastructure Security (InfraSec) team. InfraSec secures OpenAI’s research and production environments, including GPU supercomputing clusters, multi-cloud infrastructure, datacenters, networking, storage, and services powering frontier AI models.

Responsibilities

• Design and build security controls across multiple layers: physical hardware, firmware/BMC, OS, Kubernetes, networks, and CI/CD.
• Defend against sophisticated adversaries and insider threats, including securing sensitive data paths for model weights and user data.
• Collaborate across engineering and security teams to deploy security enhancements and control changes at infrastructure scale.
• Deliver high-impact initiatives such as:
  • Checkpoint encryption
  • Network isolation
  • Secret management
  • Machine identity
• Apply a generalist approach to balance deep security expertise with broad infrastructure skill to adapt to evolving AI workload risks.

Requirements

• Deep understanding of security principles, best practices, and common vulnerabilities.
• Proactive ability to identify and address security gaps/inefficiencies through automation and tooling.
• Track record delivering scalable security solutions that drive impactful infrastructure changes.
• Expertise securing cloud platforms, especially multi-cloud networking and infrastructure; ability to design cloud-agnostic systems.
• Experience securing on-prem deployments and datacenters.
• Familiarity with container security, orchestration security, and authentication/authorization.
• Strong analytical and problem-solving skills to assess security risks objectively.
• Excellent communication skills to explain complex security topics to technical and non-technical stakeholders.
• Excitement for cross-functional collaboration to build secure, reliable systems at global scale.

Nice to Have / Additional Context

• Exposure to securing diverse infrastructure components from bare metal and firmware through Kubernetes clusters and service meshes and into storage and access pathways.