Infrastructure Security Engineer (Senior/Principal)

Role overview

Secure the transition from an on-premises engineering environment to a hybrid-cloud setup, owning core identity, infrastructure, and developer security foundations. This hands-on role will shape how people and services authenticate, how systems and resources are provisioned and segmented, and how threats to critical engineering systems are detected and handled.

Responsibilities - Operate the identity platform, including Auth0 and role-based access controls across internal systems and cloud environments. - Establish least-privilege policies and access lifecycle processes for people, service accounts, and machine identities. - Manage public key infrastructure, including certificate issuance, renewal, and revocation. - Lead migration of on-premises workloads to a secure hybrid-cloud environment on GCP. - Build and maintain developer cloud infrastructure using Terraform and Ansible. - Define network segmentation and secure handling of secrets and artifacts; support threat detection and response for critical systems.

Requirements - Infrastructure security experience suited to a senior or principal-level, hands-on role. - Practical experience with identity and access management, RBAC, and least-privilege controls. - Experience building or operating hybrid-cloud infrastructure and migrating on-premises workloads to GCP. - Familiarity with infrastructure as code, including Terraform and Ansible. - Knowledge of PKI and certificate lifecycle management. - Ability to secure developer tooling and engineering infrastructure while working across hardware and software teams.

Benefits and work setup - Remote-first work with a company-provided computer and home-office setup. - Company-paid medical, dental, vision, life, and disability coverage; supplemental coverage is available. - Unlimited paid time off, 13 paid holidays, competitive salary and equity, and a 401(k) with company match. - Applicants must already be authorized to work in the U.S.; new visa sponsorship is unavailable, though eligible H-1B transfers may be supported.