<div>Nava is a neocloud company purpose-built for the AI era. We design, deploy, and operate large-scale GPU infrastructure and deliver inference-as-a-service to teams building the next generation of AI products. Our platform runs on NVIDIA GPU systems, high-performance RDMA fabrics, and a fully automated, software-defined operations model. Every engineer at Nava works close to the metal, on infrastructure built to keep GPUs saturated and models serving.</div><div> </div>

Nava

About Nava&nbsp;&nbsp;
Nava is a neocloud company purpose-built for the AI era. We design, deploy, and operate large-scale GPU infrastructure and deliver inference-as-a-service to teams building the next generation of AI products. Our platform runs on NVIDIA GPU systems, high-performance RDMA fabrics, and a fully automated, software-defined operations model. Every engineer at Nava works close to the metal, on infrastructure built to keep GPUs saturated and models serving.&nbsp;&nbsp;
About the Role&nbsp;
The Infrastructure Security team implements and automates security protections across GPU hardware, Linux, Kubernetes, networks, management planes and AI infrastructure services.&nbsp;
Implement security controls across GPU clusters, Linux, Kubernetes, and infrastructure management systems. Own vulnerability remediation, IAM, network security, workload isolation, threat detection, security automation, and incident response.&nbsp;
What You’ll Do&nbsp;
<ul>
<li>
Harden Linux hosts, BMC/management interfaces, images, firmware processes and Kubernetes clusters.&nbsp;
</li>
</ul>
<ul>
<li>
Implement IAM, privileged access, secrets, PKI, encryption and segmentation controls.&nbsp;
</li>
</ul>
<ul>
<li>
Build vulnerability scans, patch/compliance checks and secure configuration enforcement.&nbsp;
</li>
</ul>
<ul>
<li>
Protect container runtimes, CI/CD, registries, IaC and infrastructure APIs.&nbsp;
</li>
</ul>
<ul>
<li>
Develop security logging, detection rules, incident investigation and response automation.&nbsp;
</li>
</ul>
<ul>
<li>
Partner with deployment and SRE to close security gaps without impeding reliability.&nbsp;
</li>
</ul>
<ul>
<li>
Secure the AI-datacenter attack surface: multi-tenant GPU isolation (MIG / time-slicing boundaries), confidential computing and workload attestation, and segmentation of the RDMA (InfiniBand/RoCEv2) and NVLink/NVSwitch fabrics between tenants.&nbsp;
</li>
</ul>
<ul>
<li>
Harden the out-of-band and firmware supply chain — BMC/Redfish/IPMI, UEFI/BIOS and GPU/DPU (BlueField) firmware — with signed-image enforcement and secure PXE/Redfish provisioning.&nbsp;
</li>
</ul>
<ul>
<li>
Protect the AI/ML plane: model, dataset and checkpoint confidentiality on shared GPU storage, inference-endpoint/API protection, and enforce tenant data boundaries across the fabric.&nbsp;
</li>
</ul>
What You’ll Need&nbsp;
<ul>
<li>
5–8 years in infrastructure/platform security.&nbsp;
</li>
</ul>
<ul>
<li>
Hands-on Linux, Kubernetes, networks, IAM, TLS/PKI and scripting.&nbsp;
</li>
</ul>
<ul>
<li>
Experience with vulnerability management and security automation.&nbsp;
</li>
</ul>
<ul>
<li>
Ability to diagnose security issues within real production infrastructure.&nbsp;
</li>
<li>
Within that, hands-on GPU / AI-datacenter exposure is what we weigh most — we value demonstrated depth over years, as the field is still emerging.&nbsp;
</li>
<li>GPU/AI tenant isolation, OPA/Kyverno, Falco/Trivy and ISO 27001/SOC 2 controls.&nbsp;</li>
</ul>