Infrastructure Security Engineer

THE ROLE:

We’re looking for an Infrastructure Security Engineer to design and secure the core systems that power our platform. This role focuses on building security directly into our infrastructure: from container isolation and orchestration to identity and secrets management in a multi-tenant, cloud-native environment.

You’ll work closely with engineering teams to define secure primitives and ensure our platform is resilient, scalable, and trustworthy by design.

This is a hands-on, deeply technical role focused on real systems, not compliance or policy.

WHAT YOU’LL WORK ON:

Platform & Runtime Security

- Design and improve isolation mechanisms for multi-tenant workloads (containers, sandboxing, execution environments)

- Strengthen boundaries between customers, workloads, and internal systems

- Identify and mitigate risks in distributed, dynamic compute environments

Container & Orchestration Security

- Secure and harden containerized workloads and orchestration systems (e.g., Kubernetes or similar)

- Improve workload isolation, scheduling boundaries, and runtime protections

- Evaluate tradeoffs in multi-tenant execution models

Identity & Access Management

- Design and improve authentication and authorization systems across services

- Implement strong service-to-service identity and least-privilege access patterns

- Improve access controls across infrastructure and internal systems

Secrets & Key Management

- Build and maintain systems for securely managing secrets, tokens, and credentials

- Improve rotation, auditing, and access controls

- Reduce secret sprawl and integrate secure patterns into developer workflows

Cloud & Infrastructure Security

- Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability

- Improve network boundaries, service segmentation, and access controls

- Embed security into infrastructure-as-code and deployment systems

Engineering Partnership

- Work closely with product and infrastructure teams to design secure systems from the ground up

- Review architecture and code for security risks and provide actionable guidance

- Identify patterns in risks and drive cross-cutting improvements

YOU MAY BE A FIT IF:

Core Experience

- You have experience securing cloud-native infrastructure and distributed systems in production

- You have a background in infrastructure, backend, or security engineering

- You’ve worked in multi-tenant or high-scale environments

Technical Depth

- You have a strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar)

- You’ve designed or secured isolation mechanisms in multi-tenant systems

- You have a solid understanding of authentication, authorization, and service identity models

- You have experience with secrets management and secure handling of credentials

- You have a strong foundation in networking concepts (segmentation, service communication, access boundaries)

Mindset

- You have a builder mentality: you design and implement, not just review

- You take a pragmatic approach to security in fast-moving environments

- You’re comfortable working deeply with engineers and influencing system design

NICE-TO-HAVE:

- Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar)

- Familiarity with kernel-level or low-level isolation primitives

- Experience securing Kubernetes or similar orchestration systems in production

- Background in developer infrastructure, compute platforms, or multi-tenant systems