Skip to main content
CareerApp

Infrastructure Security Engineer

Modal

New York, NY

$150,000 – $270,000

Listed on Modal’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

Modal is seeking an engineer to build security into their AI infrastructure platform, protecting multi-tenant workloads across container orchestration, identity management, and cloud systems. This is a hands-on role designing and implementing isolation mechanisms and secure primitives rather than managing compliance or policy.

Our summary, not Modal’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Experience securing cloud-native infrastructure and distributed systems in production
  • Background in infrastructure, backend, or security engineering
  • Experience in multi-tenant or high-scale environments
  • Strong understanding of containerization and orchestration systems
  • Experience designing or securing isolation mechanisms in multi-tenant systems
  • Understanding of authentication, authorization, and service identity models
  • Experience with secrets management and secure credential handling
  • Strong foundation in networking and access boundaries
  • Builder mentality with hands-on design and implementation
  • Pragmatic approach to security in fast-moving environments

Nice to have

  • Experience with sandboxing or runtime isolation technologies like gVisor, Firecracker, or seccomp
  • Familiarity with kernel-level or low-level isolation primitives
  • Production experience securing Kubernetes or similar orchestration systems
  • Background in developer infrastructure, compute platforms, or multi-tenant systems

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.