Data Center Security Engineer

About the Team

Security is foundational to OpenAI's mission of ensuring that artificial general intelligence benefits all of humanity. As OpenAI builds and operates increasingly powerful systems, security helps make that progress durable, trustworthy, and resilient.

The Security team protects OpenAI's technology, people, and products, but our role goes beyond defense alone. We help enable the infrastructure, research, and product work that powers frontier AI, bringing deep technical judgment and hands‑on operational execution to some of the most important systems being built today. Our work is grounded in impact, pragmatism, and preparing for the security challenges that come with increasingly capable technology.

We are seeking an experienced and highly technical Data Center Security Engineer to help secure the infrastructure behind OpenAI's rapidly expanding data center footprint. This is a chance to work on high‑consequence systems at the intersection of cybersecurity, critical infrastructure, and advanced AI, where strong technical judgment and careful execution have direct, lasting impact.

In this role, you will operate with substantial agency and ownership alongside a small team of data center security experts, driving security architecture, control validation, and defensive improvements across multiple, diverse environments, with particular emphasis on IT, Enterprise, ICs and Operational Technology (OT) networking. You will help define and raise the security bar for infrastructure programs already in flight while shaping how future deployments are secured from the start.

This role's preferred location is one of our OpenAI offices in San Francisco, Seattle, or New York City and relocation assistance is available. We are also open to considering candidates who are remote.

• Design and implement security controls that protect data center infrastructure across a growing global footprint, with particular focus on both OT and IT networking environments.
• Partner closely with a small team of data center security specialists, as well as engineering, operations, and broader security teams, to deliver resilient and practical security outcomes.
• Secure OT and IT networking environments through strong segmentation, access control, monitoring, hardening, and connectivity patterns suited to critical infrastructure.
• Contribute to security architecture and design reviews for data center systems, including OT and IT networking, network segmentation, identity and access management, provisioning workflows, hardware and firmware trust boundaries, and operational safeguards.
• Perform recurring audits, control assessments, and validation activities across OT and IT networking environments to ensure continued compliance against defined controls.
• Drive ongoing evidence collection, gap tracking, and remediation follow-through so control deficiencies are identified quickly and closed durably.
• Help define measurable security standards, control objectives, audit procedures, evidence requirements, and validation mechanisms for infrastructure and facility security programs.
• Support security monitoring, incident response, and post‑incident improvement efforts for data center, OT, and IT networking environments.
• Work with suppliers, partners, and internal stakeholders to evaluate and reduce risks associated with third‑party hardware, firmware, software, and operational dependencies.
• Continually evolve the security of our data centers alongside changes in adversary activity, infrastructure complexity, and the increasing demands of OpenAI's systems.

• 15+ years of experience in security, including meaningful hands‑on experience securing large‑scale infrastructure, industrial environments, or data center systems.
• Deep expertise securing OT and IT networking environments in critical infrastructure settings, including segmentation strategies, remote access controls, asset visibility, and compensating controls for operational constraints.
• Experience building audit or assurance programs that validate ongoing compliance with defined security controls, especially across…