Principal Security Engineer

Built to set the gold standard for integrated AI infrastructure

Crux AI is a newly formed, U.S.-based integrated AI infrastructure company created to remove the physical and operational constraints on consequential AI ambitions. Crux brings together power, high-density data centers, TPU silicon, networking, orchestration software, and ongoing operations as one integrated system.

Crux is being capitalized to plan every layer together, develop each one to demanding standards, and operate the whole system with efficiency and reliability. That gives hyperscalers, frontier AI labs, sovereign customers, enterprises, and AI-native companies greater freedom to pursue the AI they are here to create.

WHAT YOU'LL DO

You will be the first security engineer at Crux and the architect of how our platform protects customer workloads, from hardware root of trust to the tenant boundary. Reporting within our CTPO organization, you will define the security architecture of record for our TPU clusters, data centers, network, and control plane, and build the controls yourself. Our customers include sovereign governments, frontier AI labs, and regulated enterprises running their most sensitive models on dedicated capacity, so security is part of the product, not a review at the end. This is an individual contributor seat with company-wide reach: you lead through the quality of your designs and the controls you ship.

In this role, you will:

- Define the security architecture of record across the stack: hardware and firmware, bare metal hosts, out-of-band management, cluster fabric, control plane, and customer access. - Build tenant isolation that dedicated and sovereign customers can verify, including network segmentation, secure provisioning and wipe between tenants, and attestation of what is running on their capacity. - Secure the hardware supply chain and boot path with Google and our suppliers: secure and measured boot, BMC hardening, firmware integrity, and key management. - Design how customer model weights and data are protected at rest, in transit, and in use, and how access to them is controlled and audited. - Work with Data Center Engineering and Facility Operations so that physical security, access control, and network security are designed together at every site. - Stand up threat modeling, security design review, detection, and incident response for the platform, and automate them so they scale with the fleet. - Turn customer and regulatory requirements, such as FedRAMP, SOC 2, ISO 27001, and sovereign data residency, into concrete controls and the evidence that proves them.

SIGNALS OF SUCCESS