Infrastructure Security Engineer

Opendoor

Confirmed live yesterday Trusted

Hybrid

Quick summary

Work type: Hybrid
Location: Miami, FL
Posted: 86 days ago
Freshness: Confirmed live yesterday
Nearby: 89 roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $175k

$116k most similar roles pay here $231k

This listing doesn't post a salary. Most similar roles pay $145,700–$203,500.

Based on 240 similar postings.

Employer

About Opendoor

Opendoor is a digital real estate marketplace that buys and sells homes directly to consumers, simplifying the home selling and buying experience through instant offers and transparent pricing. Industry: Real Estate Technology & iBuying

Opendoor currently has 31 open roles on FindRole.

Listed pay typically runs $156,800–$335,000 across 6 roles with salary data.

Most-posted roles

View all roles at Opendoor

At a glance

TL;DR · Infrastructure Security Engineer

Role Posting Log in to save

Infrastructure Security Engineer joins the Security Engineering team to protect infrastructure and cloud workloads across home acquisition, resale, mortgage, title, and escrow systems. The role involves owning security architecture for multi-account AWS environments, Kubernetes clusters, and identity planes while building automated remediation workflows and zero trust access strategies. You will harden Kubernetes environments using RBAC and admission policies, manage secrets via Vault, and drive shift-left security in pipelines using Terraform and GitHub Actions. Key responsibilities include running cloud detection engineering with GuardDuty and Security Hub, and securing AI-driven workflows. The technical stack includes AWS, Azure, GCP, EKS, Bottlerocket, Karpenter, Okta, and Datadog. Required skills include proficiency in Go, Python, or TypeScript, along with experience in Terraform, HCL, shell scripting, and managing cloud posture tools to ensure secure-by-default infrastructure for production environments.

Skills

AWS Kubernetes Terraform Go Python TypeScript Okta HashiCorp Vault Datadog GitHub Actions Zero Trust Azure GCP EKS Helm Argo CD S3 Kinesis CloudTrail GuardDuty Security Hub Elastic Container Registry

What you'll do

Manage and secure the production cloud environment including AWS accounts, Kubernetes clusters, and Terraform infrastructure.
Build and operate a cloud security visibility platform to automate the remediation of infrastructure risks.
Design and implement a zero trust access strategy using identity-aware proxies and device trust.
Harden Kubernetes environments through RBAC, admission policies, workload identity, and runtime protection.
Develop agentic detection and response workflows using AWS primitives to automate alert investigation and remediation.
Implement shift-left security in CI/CD pipelines to catch infrastructure misconfigurations at the commit stage.
Manage cloud detection engineering by tuning tools like GuardDuty and Security Hub for high-signal alerts.
Establish "secure by default" standards for AI-driven workflows and agentic systems interacting with production infrastructure.

What we're looking for

5+ years of cloud or infrastructure security experience with deep AWS expertise.
Proficiency in at least one of Go, Python, or TypeScript.
Ability to read and write Terraform (HCL) and shell scripts.
Hands-on Kubernetes security experience including RBAC, network policies, admission control, and workload identity.
Experience deploying and operating cloud posture and workload protection tooling such as Wiz, Prisma, Orca, or Datadog.
Demonstrated ability to build identity and access management solutions at scale with an identity-first mindset.
Proven track record of building agentic systems to automate security work and eliminate manual tasks.
Ability to operate with high autonomy in ambiguous environments to define new security standards.

Save