Senior Platform Security Engineer, AI Infrastructure
Kerry Consulting- Posted 9 hours ago
- Be among the first 10 applicants
Job Description
Overview
Our client is a fast-growing AI infrastructure organisation building and operating large-scale compute platforms for advanced AI workloads. Its technology environment spans GPU infrastructure, bare metal, Kubernetes, virtualisation, networking and cloud-native platforms.
Role
We are seeking a Senior Platform Security Engineer to drive security across the platform and infrastructure stack. You will define security architecture and engineering standards across Kubernetes, identity, privileged access, infrastructure hardening, network segmentation and vulnerability management. The role will also lead threat modelling, automate security controls within infrastructure and delivery pipelines, and strengthen isolation across workloads, tenants and management environments.
Requirements
- 7+ years of experience across infrastructure, platform or cloud security, with strong hands-on production experience.
- Deep expertise in Kubernetes and container security, including workload isolation, admission controls, network policies, secrets and least-privilege access.
- Experience securing Linux, bare-metal and infrastructure management environments, including hardware and firmware security.
- Strong automation skills using Python or Go, infrastructure-as-code and policy-as-code.
- Experience with identity, privileged access, encryption and multi-tenant infrastructure security; exposure to large-scale AI/GPU infrastructure and SOC 2 or ISO 27001 is advantageous.
To Apply
Interested candidates, please submit your resume to Grace Lim at [Confidential Information]. We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923
More Info
Key Skills
least-privilege access
multi-tenant infrastructure security
policy-as-code
GPU infrastructure
privileged access
firmware security
SOC 2
infrastructure-as-code
container security
workload isolation
network policies
admission controls




