Infrastructure Security Engineer

What you'll do

• Own the security architecture for production cloud environments including AWS, Kubernetes, and the identity plane.
• Build and operate cloud security visibility platforms integrated into engineering workflows for automated risk remediation.
• Define and drive the zero trust access strategy using device trust and identity-aware proxies.
• Harden Kubernetes environments through RBAC, admission policies, workload identity, and runtime protection.
• Develop agentic detection and response workflows using AWS native primitives to automate investigation and remediation.
• Implement shift-left security strategies in CI/CD pipelines to catch infrastructure misconfigurations at commit time.
• Manage cloud detection engineering by tuning GuardDuty, Security Hub, and CloudTrail logs for incident response.
• Establish "secure by default" patterns for AI-driven workflows and production cloud infrastructure.

What we're looking for

• Experience in cloud or infrastructure security with deep AWS expertise.
• Proficiency in at least one of Go, Python, or TypeScript.
• Ability to read and write Terraform and shell scripts.
• Hands-on Kubernetes security experience including RBAC, network policies, and workload identity.
• Experience deploying and operating cloud posture and workload protection tooling.
• Demonstrated ability to build identity and access management solutions at scale.
• Experience designing or operating Zero Trust Network Access (preferred).
• Detection engineering background with a threat modeling and adversarial mindset (preferred).