Senior Platform Security Engineer

<p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">AI </span><span data-ccp-parastyle="Body Text">FactoryOS</span><span data-ccp-parastyle="Body Text"> Operations</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></p> <p><span data-contrast="auto"><span data-ccp-charstyle="normaltextrun" data-ccp-charstyle-defn="{"ObjectId":"ac0262f4-8a9e-5820-b908-2d943c5f7113|1","ClassId":1073872969,"Properties":[201342446,"1",201342447,"5",201342448,"1",201342449,"1",469777841,"Calibri",469777842,"Arial",469777843,"Calibri",469777844,"Calibri",201341986,"1",469769226,"Calibri,Arial",268442635,"22",469775450,"normaltextrun",201340122,"1",134233614,"true",469778129,"normaltextrun",335572020,"1",469778324,"Default Paragraph Font"]}">AI </span><span data-ccp-charstyle="normaltextrun">FactoryOS</span><span data-ccp-charstyle="normaltextrun"> is Firmus' proprietary operating system for the AI Factory. It governs GPU telemetry, cooling, </span><span data-ccp-charstyle="normaltextrun">power</span><span data-ccp-charstyle="normaltextrun"> and grid interaction as one integrated layer, so that every Firmus site can be </span><span data-ccp-charstyle="normaltextrun">optimised</span><span data-ccp-charstyle="normaltextrun"> and </span><span data-ccp-charstyle="normaltextrun">monitored</span><span data-ccp-charstyle="normaltextrun"> as a single system.</span></span><span data-ccp-props="{"134233117":true,"134233118":true,"134245417":true}">&nbsp;</span></p> <p><span data-contrast="auto">AI FactoryOS Operations runs that platform in production and owns the 24/7 reliability of AI FactoryOS, Firmus AI Cloud and the platforms built on them, together with the service levels the estate is measured against.</span><span data-ccp-props="{"335559738":240,"335559739":240}">&nbsp;</span></p> <p><span data-contrast="auto"><span data-ccp-parastyle="paragraph" data-ccp-parastyle-defn="{"ObjectId":"aaed607e-c2a3-5841-9fb4-41037bfa0faf|1","ClassId":1073872969,"Properties":[469777841,"Times New Roman",469777842,"Times New Roman",469777843,"Times New Roman",469777844,"Times New Roman",469769226,"Times New Roman",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",268442635,"24",469775450,"paragraph",201340122,"2",134233614,"true",469778129,"paragraph",335572020,"1",335559705,"2057",335551547,"3081",134233118,"true",134233117,"true",134245417,"true",469778324,"Normal"]}">The remit is an engineering one. The function builds the guarded automation, remediation and operational tooling that turn manual response into a software-defined </span><span data-ccp-parastyle="paragraph">capability, and</span><span data-ccp-parastyle="paragraph"> builds and </span><span data-ccp-parastyle="paragraph">operates</span><span data-ccp-parastyle="paragraph"> the shared services the estate's own operation depends on. The function works closely with the engineering teams that build the platform, supplying the production evidence that shapes what they fix and what they build next.</span></span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":true,"335559738":0,"335559739":0}">&nbsp;</span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">Senior Platform Security Engineer</span></span></strong>&nbsp;<br><span data-contrast="none"><span data-ccp-parastyle="Body Text">Role Summary</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body" data-ccp-parastyle-defn="{"ObjectId":"baa2b379-a6d3-56f4-af2b-6a08de9434e5|1","ClassId":1073872969,"Properties":[469777841,"Aeonik",469777842,"Aeonik",469777843,"Aeonik",469777844,"Aeonik",469769226,"Aeonik",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",268442635,"20",335551500,"197122",335559740,"264",201341983,"0",335559738,"145",469775450,"FIR Body",201340122,"2",134234082,"true",134233614,"true",469778129,"FIRBody",335572020,"1",469778324,"Body Text"]}">Firmus runs large-scale, </span><span data-ccp-parastyle="FIR Body">state-of-the-art</span><span data-ccp-parastyle="FIR Body"> AI infrastructure built on the latest generation of GPU rack-scale systems and </span><span data-ccp-parastyle="FIR Body">operated</span><span data-ccp-parastyle="FIR Body"> as one estate to power the next generation of AI innovation. The Senior Platform Security Engineer owns the operational security of that platform</span><span data-ccp-parastyle="FIR Body">.&nbsp;</span> <span data-ccp-parastyle="FIR Body">The multi-tenant Kubernetes estate sits at its heart: </span><span data-ccp-parastyle="FIR Body">production access, </span><span data-ccp-parastyle="FIR Body">admission policy, workload identity</span><span data-ccp-parastyle="FIR Body"> and </span><span data-ccp-parastyle="FIR Body">network policy </span><span data-ccp-parastyle="FIR Body">in </span><span data-ccp-parastyle="FIR Body">the </span><span data-ccp-parastyle="FIR Body">live estate, and</span><span data-ccp-parastyle="FIR Body"> the </span><span data-ccp-parastyle="FIR Body">operational security controls that keep it defensible as it grows</span><span data-ccp-parastyle="FIR Body">.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body">This is a hands-on senior role with deep technical </span><span data-ccp-parastyle="FIR Body">expertise</span><span data-ccp-parastyle="FIR Body">. This role owns security in production: runtime visibility and enforcement built with modern </span><span data-ccp-parastyle="FIR Body">eBPF</span><span data-ccp-parastyle="FIR Body">-based tooling, the security acceptance requirements a release has to meet before it is </span><span data-ccp-parastyle="FIR Body">authorised</span><span data-ccp-parastyle="FIR Body">, the authority to grant or refuse a security exception, and the deepest technical escalation for security-related platform faults.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">Key Responsibilities</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List" data-ccp-parastyle-defn="{"ObjectId":"15ef5dd6-cc84-5693-b085-6dad75ec09b1|1","ClassId":1073872969,"Properties":[469777841,"Aeonik",469777842,"Aeonik",469777843,"Aeonik",469777844,"Aeonik",469769226,"Aeonik",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",268442635,"20",335551500,"197122",335559740,"264",201341983,"0",335559738,"145",469775450,"FIR Body List",201340122,"2",134234082,"true",134233614,"true",469778129,"FIRBodyList",335572020,"1",469778324,"Body Text"]}">Build runtime visibility and enforcement using </span><span data-ccp-parastyle="FIR Body List">eBPF</span><span data-ccp-parastyle="FIR Body List">-based tooling (for example Cilium, </span><span data-ccp-parastyle="FIR Body List">Falco</span><span data-ccp-parastyle="FIR Body List"> or Tetragon), feeding high-quality </span><span data-ccp-parastyle="FIR Body List">signal</span><span data-ccp-parastyle="FIR Body List"> into the estate's security monitoring, and tune detection so that alerts stay actionable as the estate grows.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Own the security gates in the delivery pipeline: image signing, software bills of materials, vulnerability gating and policy checks, and maintain the policy-as-code controls that govern what ships to production, running on the delivery toolchain operated by Shared Services Operations.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Set and own the security content of the multi-tenant Kubernetes estate: admission policy, workload </span><span data-ccp-parastyle="FIR Body List">identity</span><span data-ccp-parastyle="FIR Body List"> and network policy, and verify that what runs in production matches it.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Set the operational security standard the platform's Kubernetes control planes and baselines must meet in production, </span><span data-ccp-parastyle="FIR Body List">validate</span><span data-ccp-parastyle="FIR Body List"> against it continuously, and raise deviations as engineering requirements to the AI Infrastructure team.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Validate the layered controls that limit the blast radius of a fault or compromise across tenant boundaries, test them against realistic failure and attack paths, and feed the findings to AI Infrastructure where the control belongs to the product.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Investigate and respond to security-related operational anomalies, distinguishing a security signal from an ordinary operational symptom.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Operate</span><span data-ccp-parastyle="FIR Body List"> the platform's security controls in line with ISO 27001 and NIST frameworks, applying deep </span><span data-ccp-parastyle="FIR Body