Infrastructure Security Engineer

You will build and secure infrastructure from bare metal through platform and application layers. You will design secure server, network, identity, orchestration, container, and hybrid-cloud foundations; automate security controls; monitor and respond to incidents; maintain security tooling and policies; and partner with developers to embed security into CI/CD workflows. Responsibilities ---------------- * Design and implement secure bare-metal and private-cloud architectures. * Harden physical and virtual fleets, including OS baselines, firmware, patching, vulnerability management, and secure boot. * Build and secure network foundations, including segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS. * Manage hybrid connectivity and privileged identity access. * Design and implement secure container and Kubernetes standards. * Develop and maintain Infrastructure as Code and configuration management with security controls. * Integrate security best practices and scanning platforms into CI/CD pipelines. * Monitor and respond to security events and incidents. * Maintain SIEM data pipelines and develop security dashboards and alerts. * Build and maintain security operations infrastructure using Python, Terraform, and Puppet. * Develop infrastructure security policies, standards, and procedures. * Own security projects from issue identification through solution implementation. Requirements ------------ * Bachelor's degree in Computer Science, Cybersecurity, or a related field. * 3–5 years of infrastructure security, platform security, or related hands-on experience. * Experience securing bare-metal, data-center, or private-cloud environments. * Experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security. * Strong Puppet proficiency for configuration management and fleet hardening. * Network security experience, including firewalls, segmentation, and hybrid connectivity. * Experience with hybrid identity and cloud IAM. * Infrastructure as Code experience with Terraform for physical or VM fleets. * Familiarity with containerization and Kubernetes security. * Automation and tool-development experience with Python, Bash, or Golang. * Familiarity with GDPR, HIPAA, PCI DSS, and NIST CSF. * Experience in banking, money transmission, P2P payments, or regulated financial platforms. * Located in the SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office. Benefits -------- * Equity * Medical coverage * Vision coverage * Dental coverage * 401(k) retirement plan * Short-term disability insurance * Long-term disability insurance * Life insurance * Discounts and perks