Security Infrastructure Engineer

What You'll Own

Infrastructure Security

• Design and enforce least-privilege IAM across services
• Implement permission boundaries and SCP strategy
• Reduce attack surface across networking and service exposure
• Improve secrets management and KMS key segmentation
• Lead threat modeling across core systems
• Design blast-radius containment strategies

Detection & Response

• Strengthen logging, monitoring, and anomaly detection
• Ensure logs are immutable and auditable
• Build and test incident response playbooks
• Review new infrastructure designs for security risks

Scale & Cost

• Optimize AWS architecture for reliability and efficiency
• Improve Lambda/SQS concurrency and scaling patterns
• Evaluate and improve RDS scaling strategy
• Drive principled tradeoffs between isolation, performance, and cost

What We're Looking For

• 5+ years operating AWS infrastructure in production
• Deep IAM expertise (roles, policies, trust relationships, STS)
• Strong AWS networking knowledge (VPC, PrivateLink, Security Groups)
• Experience designing multi-account AWS environments
• Hands-on experience responding to real security incidents
• Strong understanding of cloud attack vectors and privilege escalation
• Experience reducing cloud cost without compromising security
• Comfortable working directly in CDK/Terraform and reviewing infrastructure code

Strong plus: Experience in legal, fintech, government, or other high-sensitivity environments.