Senior AI Infrastructure Security Engineer

About Nava

Nava is a neocloud company purpose-built for the AI era. We design, deploy, and operate large-scale GPU infrastructure and deliver inference-as-a-service to teams building the next generation of AI products. Our platform runs on NVIDIA GPU systems, high-performance RDMA fabrics, and a fully automated, software-defined operations model. Every engineer at Nava works close to the metal, on infrastructure built to keep GPUs saturated and models serving.

About the Role

The Infrastructure Security team implements and automates security protections across GPU hardware, Linux, Kubernetes, networks, management planes and AI infrastructure services.

Implement security controls across GPU clusters, Linux, Kubernetes, and infrastructure management systems. Own vulnerability remediation, IAM, network security, workload isolation, threat detection, security automation, and incident response.

What You’ll Do

• Harden Linux hosts, BMC/management interfaces, images, firmware processes and Kubernetes clusters.

• Implement IAM, privileged access, secrets, PKI, encryption and segmentation controls.

• Build vulnerability scans, patch/compliance checks and secure configuration enforcement.

• Protect container runtimes, CI/CD, registries, IaC and infrastructure APIs.

• Develop security logging, detection rules, incident investigation and response automation.

• Partner with deployment and SRE to close security gaps without impeding reliability.

• Secure the AI-datacenter attack surface: multi-tenant GPU isolation (MIG / time-slicing boundaries), confidential computing and workload attestation, and segmentation of the RDMA (InfiniBand/RoCEv2) and NVLink/NVSwitch fabrics between tenants.

• Harden the out-of-band and firmware supply chain — BMC/Redfish/IPMI, UEFI/BIOS and GPU/DPU (BlueField) firmware — with signed-image enforcement and secure PXE/Redfish provisioning.

• Protect the AI/ML plane: model, dataset and checkpoint confidentiality on shared GPU storage, inference-endpoint/API protection, and enforce tenant data boundaries across the fabric.

What You’ll Need

• 5–8 years in infrastructure/platform security.

• Hands-on Linux, Kubernetes, networks, IAM, TLS/PKI and scripting.

• Experience with vulnerability management and security automation.

• Ability to diagnose security issues within real production infrastructure.

• Within that, hands-on GPU / AI-datacenter exposure is what we weigh most — we value demonstrated depth over years, as the field is still emerging.

• GPU/AI tenant isolation, OPA/Kyverno, Falco/Trivy and ISO 27001/SOC 2 controls.