Senior Engineer, Platform Security and Reliability

The posting, as Kairos Power wrote it

Company Overview

Kairos Power is a new nuclear energy technology and engineering company whose mission is to enable the world’s transition to clean energy, with the ultimate goal to dramatically improve people’s quality of life while protecting the environment. This goal will be accomplished through the commercialization of the fluoride-salt-cooled, high-temperature reactor (FHR) that can be deployed with robust safety, affordable costs, and flexible operation to accommodate the expansion of variable renewables.

Job Summary

Kairos Power is looking for a Senior Platform Security and Reliability Engineer to work within a small software and infrastructure team that supports the needs of our design, research, and development organizations. This is a hands-on individual contributor role. You will own the security baseline and the reliability posture of the cloud and high-performance computing platforms that engineering teams depend on, and you will build the controls, automation, and recovery mechanisms that keep those platforms both defensible and dependable.

You will set technical direction for platform security controls across AWS and Google Cloud, for identity and secrets management, for machine image security, for network security, and for observability architecture. You will lead the migration of legacy cloud workloads and the retirement of duplicative services, and you will own the cost visibility and resource guardrails that keep cloud and high-performance computing spend predictable. You will lead response to both availability and security incidents, and communicate clearly with the engineers and stakeholders who depend on these services. The group favors simple, proportionate designs assembled from standard, well-supported technologies, and this role is expected to be a leading voice for that standard. Success means becoming the trusted technical owner of platform security and reliability, with systems that can be operated and maintained by engineers other than their original author.

Responsibilities

Security baseline and platform controls

• Define, implement, and maintain the security baseline for cloud and Linux platforms, including operating system hardening, benchmark configuration, and secure defaults for new environments.
• Own platform security controls in AWS and Google Cloud, including account and project structure, guardrails, service configuration, logging, and both preventative and detective controls.
• Design and enforce least-privilege access patterns across cloud accounts, Linux systems, and internally hosted engineering services.
• Own the security of machine image pipelines, including image hardening, vulnerability scanning, patch currency, automated image testing, versioned releases, and rollback.
• Assess new platform technologies for security impact before adoption, and document the reasoning behind each decision.

Identity, secrets, and certificates

• Own identity and access management across cloud and s

[…]
lary may include your education, experience, knowledge, skills, ability and the market data for your work location, and a comparison to other employees already in the role.

#LI-Remote

About our Benefits

We know that we have some of the most talented and dedicated employees, and we believe in rewarding them accordingly. If you work here, full-time employees (excludes interns) expect to have access to the benefits below:

• Competitive compensation packages
• Medical, dental and vision benefits for employees and their dependents
• Paid Vacation
• 401(k) and pre-tax health insurance, dependent care, and commuter benefits (FSA)

Kairos Power is committed to building a diverse workforce that reflects the communities where we do business. Kairos Power is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We actively welcome people of different experiences, abilities, and perspectives.

Kairos Power participates in E-Verify.

Candidates only, no recruiters or agencies please.

Note: You are applying for a position that is located in a facility that handles information that is subject to export control restrictions by the Department of Energy under 10 CFR Part 810. To work in this facility, you need to be authorized by the Department of Energy to access Part 810-controlled information. Foreign nationals who are citizens of countries that are not on the Department of Energy’s general authorization list (link below) are not permitted to work in our facility unless the Department of Energy issues an export control license to the company to permit that individual to have access to Part 810-controlled information. The following questions are intended to determine the licensing requirements that may apply. https://www.law.cornell.edu/cfr/text/10/appendix-A_to_part_810