Staff Infrastructure Security Engineer (Vault)

Staff Infrastructure Security Engineer (Vault) Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster. We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI. We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services. If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe. About This Role: We’re seeking a Staff Infrastructure Security Engineer to architect and operationalize the foundational security services that enable our transition to a Zero Trust model. This is a highly strategic role focused on establishing the organization’s “roots of trust,” with immediate ownership of our enterprise HashiCorp Vault platform, from Proof of Concept through global production readiness. You’ll serve as the subject matter expert for secrets management and identity architecture, while designing scalable, self-service trust patterns across our hybrid, multi-cloud environment. Over time, this role will shape our long-term credentials management strategy and how engineering teams securely interact with core infrastructure. What You’ll Be Working On: - Architecting a highly available, disaster-resilient, multi-cluster secrets management platform as the foundation of our Zero Trust strategy - Driving Vault from PoC to enterprise-grade production, establishing standards, reliability, and scalability - Leading cross-functional alignment with Cloud Engineering, DevOps, and SRE teams on secure secret management workflows embedded into the SDLC - Designing and enforcing governance controls to meet internal policies and external compliance requirements (e.g., SOX, ISO 27001) - Implementing Policy as Code using Sentinel to automate guardrails and access decisions - Engineering Vault infrastructure using Terraform with fully automated, reproducible, and version-controlled deployments - Architecting integrations between Vault, identity providers (e.g., Okta), and workload identities (e.g., Kubernetes Service Accounts) - Configuring and tuning core Vault secrets engines (KV, Transit, KMIP) and Enterprise features such as performance replication and automated sealing - Operationalizing “Vault as a Service” through paved-road onboarding, self-service workflows, and clear developer documentation - Building observability across the platform, including monitoring, alerting, audit logging, and usage insights What You’ll Bring to the Team: - 8+ years of hands-on experience in cloud security, DevOps, or infrastructure engineering - Deep, production-grade experience deploying and operating HashiCorp Vault in enterprise environments (Enterprise edition strongly preferred) - Expert knowledge of secrets management, cryptography, PKI/X.509 certificate authorities, and trust systems - Strong experience with Google Cloud Platform (GCP) and cloud-native IAM models - Proven expertise using Infrastructure-as-Code tools (Terraform) to automate security platforms - Hands-on experience with Kubernetes and securely integrating secrets into microservices architectures - Fluency in at least one programming language (Go or P ... (truncated, view full listing at source)