Infrastructure Security Engineer

You will build and secure infrastructure from bare metal through platform and application layers. You will design secure server, network, identity, orchestration, container, and hybrid-cloud foundations; automate security controls; monitor and respond to incidents; maintain security tooling and policies; and partner with developers to embed security into CI/CD workflows.

Responsibilities

• Design and implement secure bare-metal and private-cloud architectures.
• Harden physical and virtual fleets, including OS baselines, firmware, patching, vulnerability management, and secure boot.
• Build and secure network foundations, including segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS.
• Manage hybrid connectivity and privileged identity access.
• Design and implement secure container and Kubernetes standards.
• Develop and maintain Infrastructure as Code and configuration management with security controls.
• Integrate security best practices and scanning platforms into CI/CD pipelines.
• Monitor and respond to security events and incidents.
• Maintain SIEM data pipelines and develop security dashboards and alerts.
• Build and maintain security operations infrastructure using Python, Terraform, and Puppet.
• Develop infrastructure security policies, standards, and procedures.
• Own security projects from issue identification through solution implementation.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of infrastructure security, platform security, or related hands-on experience.
• Experience securing bare-metal, data-center, or private-cloud environments.
• Experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security.
• Strong Puppet proficiency for configuration management and fleet hardening.
• Network security experience, including firewalls, segmentation, and hybrid connectivity.
• Experience with hybrid identity and cloud IAM.
• Infrastructure as Code experience with Terraform for physical or VM fleets.
• Familiarity with containerization and Kubernetes security.
• Automation and tool-development experience with Python, Bash, or Golang.
• Familiarity with GDPR, HIPAA, PCI DSS, and NIST CSF.
• Experience in banking, money transmission, P2P payments, or regulated financial platforms.
• Located in the SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office.

Benefits

• Equity
• Medical coverage
• Vision coverage
• Dental coverage
• 401(k) retirement plan
• Short-term disability insurance
• Long-term disability insurance
• Life insurance
• Discounts and perks