Skip
Infrastructure Security Engineer
San Francisco · Full-time
Sponsorship not specifiedDetected 43 days ago
GCPCloud PlatformsTerraformCI/CDCybersecurityComplianceAuditingFDA RegulatoryAdaptability
About the role
- You'll work closely with our backend and firmware engineers as a core member of our small software team.
- There's no security org above you, no dedicated platform team below you.
- Some of the specific responsibilities include, but are not limited to:
Responsibilities
- Design and operate Skip's PKI infrastructure -- device certificate provisioning, certificate authority management, key lifecycle management, and revocation -- across our device fleet and cloud services
- Own device identity and secure boot: ensure every MO/GO that leaves our factory is cryptographically authenticated and that firmware updates can only come from Skip
- Build and maintain security tooling for secrets management, vulnerability scanning, dependency auditing, and incident detection
- Define and implement secure OTA (over-the-air) update pipelines that ensure firmware integrity from signing through delivery to device
Requirements
- 6+ years of experience in infrastructure engineering, platform security, or a combined DevSecOps role
- Hands-on experience designing and operating PKI systems: CA hierarchies, certificate provisioning at scale, key management, and revocation
- Experience with Infrastructure as Code (Terraform or equivalent)
- Experience with CI/CD security: signing pipelines, artifact attestation, secrets hygiene
- Ability to relocate to work at the Skip Bay Area office
- Experience securing IoT or embedded device fleets at scale, including OTA update security
- Familiarity with embedded security primitives: secure elements, TrustZone, TPM, or hardware attestation
- Experience with BLE security and wireless protocol hardening
- Experience in start-up environments
Skills
- Harden our GCP infrastructure across networking, IAM, secrets management, and data isolation between Dev and Prod environments
- Automate infrastructure provisioning and security configuration using Terraform and GCP-native tooling
- Bring joy to the team, participate in embarrassing team events, tolerate KZ's terrible music choices
Company info
- Skip is on a mission to make life joyful through powered movement.
- Movement is a powerful way to build physical, mental and social health. Yet it is elusive for 2 billion people due to age, injury, or disability. We are building products that will restore mobility for millions and enable a new frontier of joyful movement experiences. We want to build a future where a grandparent can easily outrun their grandkids and no one is left behind at the trailhead.
- Skip is a 24-person early-stage start-up that spun out of Google X in 2023. With deep cross-disciplinary expertise and key partnerships (e.g. with Arc'teryx) we are uniquely positioned to launch the first commercially successful wearable robotic device, the MO/GO, develop a platform to launch future Movewear products and transform millions of lives in the coming years.
- Movement is a powerful way to build physical, mental and social health.
- Yet it is elusive for 2 billion people due to age, injury, or disability.
- We are building products that will restore mobility for millions and enable a new frontier of joyful movement experiences.
- We want to build a future where a grandparent can easily outrun their grandkids and no one is left behind at the trailhead.
- Skip is a 24-person early-stage start-up that spun out of Google X in 2023.
- With deep cross-disciplinary expertise and key partnerships (e.g. with Arc'teryx) we are uniquely positioned to launch the first commercially successful wearable robotic device, the MO/GO, develop a platform to launch future Movewear products and transform millions of lives in the coming years.
- We are seeking a highly motivated and adaptable engineer to own the infrastructure and security foundation that a fleet of wearable robots depends on.
- This means hardening our cloud and device infrastructure from the ground up, and building the PKI and device identity systems that let us ship trusted firmware to thousands of MO/GOs in customers' homes -- safely, verifiably, and at scale.
- You'll be writing the playbook.
This listing is sourced directly from Skip's careers page and normalized into a canonical job model.