Security Engineer

What You’ll Do

Security engineers build the controls and trust layer that let our platform scale safely. Sample projects include:

• designing the identity and access layer that authenticates customers, internal users, and physical devices under a single coherent token and tenancy model
• designing and enforcing cloud IAM policies and permission boundaries so every user and service operates at minimum privilege
• hardening the external APIs our partners integrate with, including auth flows, threat modeling, rate limiting, and DDoS protection
• architecting secure cloud infrastructure with IaC and automated guardrails that catch misconfigurations before production
• securing Kubernetes clusters through RBAC, network policies, admission controllers, and secrets management
• owning the device identity story for our edge hardware — provisioning, credential rotation, and the path to mTLS with managed PKI as we scale to externally deployed fleets
• addressing lower-level concerns such as firmware pipelines, on-device security, and secure data ingestion from robotics hardware

Baseline skills

• 5+ years in security engineering or software engineering with a strong security focus
• deep hands-on experience with cloud security primitives (IAM, organizational policies, VPCs, networking, logging, and encryption services)
• track record securing external-facing APIs and platforms in a B2B context, including modern auth standards (OAuth 2.1, OIDC, JWT validation, multi-tenant token design)
• proficiency with Infrastructure-as-Code and a GitOps-driven approach to managing environments
• fluency with Python or Go

You might be a good fit if you:

• have experience with embedded systems, firmware security, or securing hardware-software interfaces