Infrastructure Security Engineer

What You'll Do

Platform & Runtime Security

• Design and improve isolation mechanisms for multi-tenant workloads (containers, sandboxing, execution environments)
• Strengthen boundaries between customers, workloads, and internal systems
• Identify and mitigate risks in distributed, dynamic compute environments

Container & Orchestration Security

• Secure and harden containerized workloads and orchestration systems (e.g., Kubernetes or similar)
• Improve workload isolation, scheduling boundaries, and runtime protections
• Evaluate tradeoffs in multi-tenant execution models

Identity & Access Management

• Design and improve authentication and authorization systems across services
• Implement strong service-to-service identity and least-privilege access patterns
• Improve access controls across infrastructure and internal systems

Secrets & Key Management

• Build and maintain systems for securely managing secrets, tokens, and credentials
• Improve rotation, auditing, and access controls
• Reduce secret sprawl and integrate secure patterns into developer workflows

Cloud & Infrastructure Security

• Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability
• Improve network boundaries, service segmentation, and access controls
• Embed security into infrastructure-as-code and deployment systems

Engineering Partnership

• Work closely with product and infrastructure teams to design secure systems from the ground up
• Review architecture and code for security risks and provide actionable guidance
• Identify patterns in risks and drive cross-cutting improvements

Requirements

Core Experience

• Experience securing cloud-native infrastructure and distributed systems in production
• Background in infrastructure, backend, or security engineering
• Experience working in multi-tenant or high-scale environments

Technical Depth

• Strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar)
• Experience designing or securing isolation mechanisms in multi-tenant systems
• Solid understanding of authentication, authorization, and service identity models
• Experience with secrets management and secure handling of credentials
• Strong foundation in networking concepts (segmentation, service communication, access boundaries)

Mindset

• Builder mentality, you design and implement, not just review
• Pragmatic approach to security in fast-moving environments
• Comfortable working deeply with engineers and influencing system design

Preferred Qualifications

• Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar)
• Familiarity with kernel-level or low-level isolation primitives
• Experience securing Kubernetes or similar orchestration systems in production
• Background in developer infrastructure, compute platforms, or multi-tenant systems