Modal
Infrastructure Security Engineer
$150K–$270K
New York +2 · On-site · Full-time · Posted Apr 21, 2026
- Location
- New York
Stockholm
San Francisco
About the job
Designs and implements security for Modal’s cloud-native, multi-tenant infrastructure, including workload isolation, identity, secrets, and platform protections.
What you'll do
- Design and improve isolation for multi-tenant workloads and secure containerized workloads and orchestration systems.
- Build and maintain identity, access-control, secrets, and key-management systems.
- Secure cloud infrastructure and partner with engineering teams to design secure systems and drive cross-cutting improvements.
What they ask for
- Production experience securing cloud-native infrastructure and distributed systems.
- Background in infrastructure, backend, or security engineering; experience in multi-tenant or high-scale environments.
- Strong understanding of containerization and orchestration, including isolation mechanisms in multi-tenant systems.
- Understanding of authentication, authorization, service identity, secrets management, and networking concepts.
Nice to have
- Experience with sandboxing or runtime isolation technologies such as gVisor, Firecracker, or seccomp.
- Familiarity with kernel-level or low-level isolation primitives; experience securing Kubernetes or similar systems in production.
Pay
$150K – $270K (base salary)
Tools
Kubernetes, AWS, GCP, gVisor, Firecracker, seccomp
AI focus
Secures infrastructure that supports AI workloads, including low-latency inference, model fine-tuning, and production-ready sandboxes.
Model-written summary · the original posting is authoritative