Platform Engineer (Lab Infrastructure / DevSecOps)

George Bernard Consulting

  • South San Francisco, California
  • 23 days ago

    Highlights

    Design and scale the networking and on-site computing setup for automated labs, including GPU and storage systems that move very large volumes of scientific data. Create ready-to-use infrastructure plans so new laboratory sites can be launched quickly, securely, and in different regions.

    Numbers & Facts

    LocationSouth San Francisco, California

    Description

    Responsibilities

    • Design and scale the networking and on-site computing setup for automated labs, including GPU and storage systems that move very large volumes of scientific data.
    • Automate network setup and management using Terraform and Ansible, covering pfSense and MikroTik environments.
    • Own security for the lab's robotic equipment and physical hardware, working alongside the cloud setup (AWS VPC and IAM).
    • Build and protect cloud environments, and keep lab systems and cloud systems securely connected.
    • Create ready-to-use infrastructure plans so new laboratory sites can be launched quickly, securely, and in different regions.
    • Run security activities such as vulnerability management, testing, and incident response across both lab hardware and web applications.

    Requirements

    • 7+ years in platform, infrastructure, systems, or DevSecOps engineering.
    • Hands-on experience with physical hardware environments such as labs, factories, robotics, or data centers. A background only in software-as-a-service (SaaS) is not enough.
    • Strong networking knowledge: routing, VLANs, firewalls, and tools like pfSense and MikroTik.
    • Strong Infrastructure-as-Code skills using Terraform, Ansible, Python, and Bash.
    • Able to work from the South San Francisco office 3 days a week.
    • Must be legally authorized to work in the US (US citizen or Green Card holder). Visa sponsorship is not available.

    Skills Required

    • Network engineering (routing, VLANs, firewalls, high-speed networking)
    • pfSense & MikroTik
    • Infrastructure-as-Code (Terraform, Ansible)
    • Python & Bash scripting
    • AWS (VPC, IAM, ECS, Lambda, Secrets Manager)
    • CI/CD (GitHub Actions)
    • DevSecOps & vulnerability management
    • Security testing (OWASP, SAST/DAST, WAF)
    • Incident response
    • On-site compute and GPU infrastructure
    • VPN & secure access (Tailscale, WireGuard)

    Similar Jobs