Groq

Groq

Sr. Staff Platform Security Engineer, Cloud Infrastructure

San Francisco, USA · Staff+

Sponsorship not specified$341k-$402kDetected 19 days ago
PythonGoNode.jsDistributed SystemsCloud PlatformsKubernetesPlatform EngineeringCybersecurityNetwork Security

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

H-1B wage level

the lottery is wage-weighted — each level is one more entry

Level IV · 4×
Level I$80,8701 entry
Level II$121,0142 entries
Level III$161,1383 entries
Level IV$201,2824 entries

This range already reaches Level IV — the maximum four lottery entries.

DOL prevailing wage, 2026-27 wage year · Computer Occupations, All Other (15-1299) · San Francisco-Oakland-Fremont, CA. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

12 transfer filings in the last year, covering 12 workers. Median labor-condition decision: 382 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • You'll have the flexibility to work remotely while we establish our local Groq office, with the expectation that this role will transition to onsite once the office opens.
  • Architect security controls and isolation mechanisms for multi-tenant systems across compute, network, storage, and control-plane boundaries.

Responsibilities

  • Set technical direction and own the architecture for critical platform security capabilities across identity, authorization, infrastructure security, encryption, key management, and auditability.
  • Design and build identity and access systems spanning authentication, federation, authorization, workload identity, lifecycle provisioning, and administrative access.
  • Build and scale security capabilities for Kubernetes and other distributed infrastructure using software, policy, automation, APIs, controllers, Infrastructure-as-Code, and GitOps.
  • Own infrastructure lifecycle security, including secure provisioning, secrets and credential management, encryption, and certificate lifecycle.
  • Build production software and automation that make secure infrastructure patterns reliable, scalable, and easy for engineering teams to adopt.
  • Lead security-sensitive platform designs and changes, translating complex risks and requirements into practical engineering decisions and scalable platform capabilities.
  • Shape security architecture and technical standards across Platform Engineering, influencing designs beyond the systems you directly own.
  • Partner across engineering and security to build capabilities that strengthen customer trust, platform reliability, and support compliance requirements.
  • 6+ years of software engineering experience building complex infrastructure or distributed systems, with deep experience in cloud and platform security, identity and access, Kubernetes, or related infrastructure security domains.
  • Strong software engineering skills in Go, Python, or similar languages, with experience designing, building, and operating production systems.

Requirements

  • The person hired for this role must be based in one of these three areas.
  • Deep experience with identity and access technologies such as OIDC, SAML, SCIM, RBAC, workload identity, short-lived credentials, and multi-factor authentication.
  • Strong understanding of secrets management, encryption, key management, certificate lifecycle, and secure credential management.
  • Experience with network policy and encryption or security for high-performance storage and distributed infrastructure is valuable.

Compensation

  • Groq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay.
  • The total cash salary range for this position, which is inclusive of the potential bonus value, is $341,400 - $401,600, with individual placement determined by your geographic location, experience, skills, and alignment with internal compensation standards.
  • Compensation for international candidates will vary based on local market dynamics.
  • Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits. #LI-MS1

Benefits

  • Compensation: Groq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay.
  • Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits. #LI-MS1

Company info

  • Our mission fuels everything we do.

Visa & Work Authorization

  • export control laws and regulations, including the Export Administration Regulations (EAR)

This listing is sourced directly from Groq's careers page and normalized into a canonical job model.