Bare - metal infrastructure engineer building Render’s cloud hardware platform from colocation deployment through fleet automation. Scaling server infrastructure, Kubernetes integration, and operations across thousands of hosts.
About the role
- Infrastructure Security Engineer securing LiveKit’s production cloud infrastructure and customer-deployed voice AI agents. Building security guardrails, remediating risks, and automating PCI-DSS and ISO 27001 evidence.
Responsibilities
- Map the security posture of cloud and production infrastructure and document a baseline
- Identify infrastructure security gaps that could lead to customer data loss or infrastructure compromise
- Prioritize the security debt backlog with engineering and remediate the highest-risk items
- Harden identity, secrets, and network boundaries, including cloud IAM, environment separation, and credential hygiene
- Secure infrastructure for customer-deployed voice AI agents, including tenant isolation, third-party model-provider secrets, and media and recording storage
- Build guardrails and secure defaults into infrastructure as code
- Partner with Compliance to map infrastructure controls to PCI-DSS and ISO 27001
- Automate technical evidence required for compliance audits
- Own meaningful parts of LiveKit's infrastructure security program within the Trust team
Requirements
- 5+ years in security engineering, infrastructure engineering or SRE, with a significant share focused on infrastructure security
- Hands-on experience securing AWS, GCP, or Azure
- Experience securing containerized workloads, including Kubernetes
- Track record of owning infrastructure security for a production platform
- Fluency with infrastructure as code such as Terraform
- Strong scripting and automation skills in Go or Python
- Pragmatic approach to risk and ability to explain business impact and remediation urgency
- Experience with real-time media, networking, or WebRTC systems (nice to have)
- Experience in AI security, including securing LLM applications or agent infrastructure (nice to have)
- Incident response or application security experience (nice to have)
- Experience supporting PCI-DSS, ISO 27001, SOC 2, or HIPAA compliance audits (nice to have)
- Legally authorized to work in the US or country of residence
- Must answer whether future sponsorship support is required
Benefits
- Competitive salary
- Equity package
- Health, dental, and vision benefits
- Flexible vacation policy
- Opportunity to contribute to open source alongside world-class engineers
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Industrial systems specialist administering ICS infrastructure for Gibson Energy’s oil and gas operations. Securing servers, networks, control systems and field integrations from Calgary Head Office.
Senior Infrastructure Engineer building distributed systems, cloud tooling, and real - time data infrastructure. Supporting Liftoff’s AI - powered performance marketing platform for the mobile app economy.
Telco infrastructure architect designing Red Hat cloud, virtualization, and automation solutions. Advising telecommunications customers and leading integrated architecture implementations.
Staff Engineer designing secure Azure, Meraki, and FortiGate infrastructure for EQ Bank, Canada’s challenger bank. Defining network architectures, governance, and disaster recovery solutions.
Staff infrastructure engineer owning Keycard’s BYOC deployments and cloud cells. Building secure, repeatable infrastructure for its agent identity and access platform.
Senior Frontend Infrastructure Engineer evolving React infrastructure, design systems, and reusable patterns. Building foundations for Seeq’s industrial process data insight software.
Senior Infrastructure Security Engineer securing Zapier’s automation platform and production cloud environments. Improving IaC, Kubernetes, CI/CD security, data governance, and incident response.
Verification and validation developer building Python/C++ automation, telemetry, and CI/CD infrastructure. Supporting Octasic’s wireless SoC platforms and mission - critical communication systems.
Ingénieur logiciel chez Octasic, concevant l’infrastructure d’automatisation et d’observabilité V&V. Soutien aux systèmes sans fil et embarqués critiques via CI/CD, télémétrie et validation.