Infrastructure Security Engineer, Public Sector

Responsibilities

• Secure infrastructure across large cloud hosting providers (e.g., AWS, Azure, GCP).
• Implement and maintain robust security configurations and policies for cloud environments.
• Conduct regular security assessments and audits of infrastructure to identify vulnerabilities and areas for improvement.
• Develop and enforce security best practices for infrastructure automation and orchestration.
• Collaborate with Developer Experience, IT, and product teams to integrate security into all stages of the infrastructure lifecycle.
• Review and secure infrastructure as code (e.g., Terraform, CloudFormation).
• Educate and mentor team members on infrastructure security best practices and emerging threats.

Requirements

• At least an active Top Secret clearance (required; candidates without will not be considered).
• Proven experience as a Security Engineer with a focus on infrastructure security.
• Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes.
• Strong understanding of modern Javascript application design.
• Production experience with Kubernetes backed services.
• Hands-on experience with SAST and DAST tools and methodologies.
• Familiarity with Terraform orchestration for infrastructure management.
• Ability to structure complex problems and diagnose root causes independently.
• Excellent communication skills, with the ability to clearly present technical concepts to both technical and non-technical stakeholders.
• Demonstrated ability to influence security strategies and drive improvements within a team.

Nice-to-Haves

• Relevant security certifications (e.g., CISSP, CEH, OSCP).