AI Container Platform Security Engineer

Santa Clara, CA, United States

Job Details: Job Description:  We are a global leader, creating world-changing technology that enables progress and enriches lives. Intel is at the intersection of several technology inflections - artificial intelligence, 5G network transformation, and the rise of the intelligent edge- that together will shape the future of technology.

As AI reshapes not only computing, but also business and society, Intel is making major bets on the future of AI and particularly in data center computing.  Intel’s Datacenter and AI Solutions (DAIS) organization is a critical part of Intel boarder AI efforts. DAIS responsibility spans data center workloads from generative AI and deep learning to analytics, HPC, and graphics – all of which are intertwined in the future of computing.

Intel is hiring an AI Container Platform Security Engineer for development and optimization of its AI infrastructure. This includes collaboration with other team members to design and build a highly resilient Kubernetes container platform that is optimized for AI workloads on Intel accelerator hardware.

Areas of responsibility for the AI Container Platform Security Engineer role include, but are not limited to the following:

Successful candidates will have a strong desire to address challenges with attention to detail and focus to build a highly reliable and scalable container platform.

Work with others to design, build, and maintain a Kubernetes container platform on bare metal on-premises hardware.

Participate in building advanced tooling for deployment, testing, monitoring, logging, administration, auditing, and operations of multiple Kubernetes clusters in distributed data centers.

Research and implement security solutions for Kubernetes to build a highly reliable, scalable, secure, and resource-optimized AI container platform.

Evaluate and select of third-party commercial and open-source security components for the AI container platform.

Monitoring and awareness of current vulnerabilities, applicability to the platform, and remediation activities.

Identify and recommend appropriate security enhancements to the container platform.

The ideal candidate will have the following skills in addition to the qualifications listed below:

Demonstrated knowledge building automated security apparatus.

In-depth understanding and practical implementation of the Kubernetes Hardening Guidance from NSA/CISA.

Willingness to address challenges with attention to detail and focus to build a highly reliable and scalable container platform.

A foundational understanding of software development principles and testing methodologies along with a high degree of independence, adaptability, drive, and willingness to accept new challenges, are a must.

Qualifications: You must possess the minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum qualifications and are considered a plus factor in identifying top candidates.

Minimum Qualifications

Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or a related field with 4+ years of relevant work experience or

Master's degree in Computer Engineering, Computer Science, Information Systems, or a related field with 4+ years of relevant work experience.

Including 3+ years of experience in the following:

Using Python, Golang or another modern programming language.

Working with Linux based operating systems such as CentOS, Ubuntu, SUSE, or Rocky.

Using Bash shell scripting and Linux command-line acumen.

Deploying software in a Cloud or on-premises data center environment.

Using Linux containers and container runtimes (Docker, containerd, cri-o).

Using Kubernetes.

Working with Security configuration best practices and benchmarks.

Working with Container image scanning workflow and remediation actions to ensure a secure supply chain.

With static and dynamic security assessment products and open-source scanning tools.

Using Role-based access control (RBAC) and role hierarchy implementation on a container platform.

Working with Identity Provider (IdP), Single sign-on (SSO) and integrating Kubernetes with an OIDC provider using JSON Web Tokens (JWT).

Preferred Qualification

Git development workflow experience.

Experience securing private registries, APIs, and Kubernetes application deployments.

Experience with Platform multi-tenancy and relevant security considerations.

Experience with Kubernetes-related security tools, such as Kubebench and SonarQube.

Experience in a DevSecOps role.

Experience with Network policy object configuration and testing on a Kubernetes platform.

Policy-based control tools and frameworks for cloud environments (such as OPA) experience.

Secrets management in a container platform with tools like Hashicorp Vault, CyberArk experience.

PKI, Certificate management and rotation automation knowledge.

Well-versed in threat modeling and the least privilege principal experience.

Experience with Enabling and persisting auditing information on a Kubernetes cluster.

Experience with Container platform threat detection tools such as Sysdig Falco.

Hardware accelerators and specialized devices (GPU, HPU, HPC) security considerations experience.

Job Type: Experienced Hire Shift: Shift 1 (United States of America) Primary Location:  US, Texas, Austin Additional Locations: US, Arizona, Phoenix, US, California, Folsom, US, California, San Diego, US, California, Santa Clara, US, Ohio, Columbus, US, Oregon, Hillsboro Business group: The Data Center & Artificial Intelligence Group (DCAI) is at the heart of Intel’s transformation from a PC company to a company that runs the cloud and billions of smart, connected computing devices. The data center is the underpinning for every data-driven service, from artificial intelligence to 5G to high-performance computing, and DCG delivers the products and technologies—spanning software, processors, storage, I/O, and networking solutions—that fuel cloud, communications, enterprise, and government data centers around the world. Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Position of Trust N/A Benefits:

We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock, bonuses, as well as, benefit programs which include health, retirement, and vacation.  Find more information about all of our Amazing Benefits here:  https://www.intel.com/content/www/us/en/jobs/benefits.html

Annual Salary Range for jobs which could be performed in

US, California:$162,082.00-$243,222.00 S al ary range dependent on a number of factors including location and experience.

Work Model for this Role

This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. In certain circumstances the work model may change to accommodate business needs.