Infrastructure Security Engineer

What you'll do

• Manage the security architecture for production cloud environments including AWS accounts, Kubernetes clusters, and identity planes.
• Build and operate a cloud security visibility platform integrated into engineering workflows for automated risk remediation.
• Define and implement zero trust access strategies using device trust and identity-aware proxies.
• Harden Kubernetes environments through RBAC, admission policies, workload identity, and runtime protection.
• Develop agentic detection and response workflows using AWS primitives to automate alert investigation and remediation.
• Implement shift-left security in CI/CD pipelines to catch infrastructure misconfigurations at the commit stage.
• Manage cloud detection engineering by tuning GuardDuty, Security Hub, and CloudTrail logs for high-signal alerts.
• Establish "secure by default" standards for AI-driven workflows and agentic systems interacting with production infrastructure.

What we're looking for

• Must have 5+ years of cloud or infrastructure security experience with deep AWS expertise.
• Proficiency in at least one programming language: Go, Python, or TypeScript.
• Ability to read and write Terraform (HCL) and shell scripts.
• Hands-on experience in Kubernetes security including RBAC, network policies, admission control, and workload identity.
• Experience deploying and operating cloud posture and workload protection tooling such as Wiz, Prisma, Orca, or Datadog.
• Demonstrated ability to build identity and access management solutions at scale with an identity-first mindset.
• Proven track record of building agentic systems to automate and replace manual security work.
• Must be based within commuting distance of the Miami office for in-person work four days per week.