Security Engineer (Infrastructure Security)

Deep understanding of security principles, common vulnerabilities, and practical defenses across infra and application layers. 5+ years building and operating core infrastructure security or platform security at scale. Expertise securing cloud platforms (e.g., AWS/Azure/GCP), including cloud networking, identity, and cloud-agnostic abstractions. Experience with datacenter security from construction/bring-up to multi-tenant operations. Familiarity with container/Kubernetes security (workload identity, admission controls, policy engines, image supply chain). Proven track record delivering scalable, automated security solutions and moving organizations via tooling and paved paths. Strong analytical/problem-solving skills; crisp communication with technical and non-technical stakeholders.

Design and build layered security controls across OS, Kubernetes, networks, identity, and CI/CD. Drive deployment of security enhancements and policy changes across multi-region infrastructure. Lead high-impact initiatives: checkpoint/model artifact protection and encryption, network isolation and segmentation, secrets and machine identity, policy-as-code, and secure storage/access pathways. Automate detection, prevention, and response with guardrails and paved paths. Embed security into developer workflows. Partner on risk assessments, threat modeling, and incident response. Champion a healthy security culture.