Infrastructure Security Engineer (Senior/Principal)
About The Position
Positron is seeking a Senior or Principal Infrastructure Security Engineer to secure its transition from a primarily on-premises engineering environment to a hybrid-cloud model. This hands-on, high-ownership role will establish and operate foundational security and infrastructure capabilities, including identity and access management, cloud infrastructure for developers, infrastructure as code, and core developer tooling used by hardware and software teams. The engineer will define how employees and systems authenticate, how infrastructure is provisioned and segmented, how secrets and artifacts are stored, and how threats to critical systems are detected and handled. The role includes leading the migration of on-premises workloads to a secure hybrid-cloud environment on GCP, building developer infrastructure, deploying a SIEM, and developing incident response processes. The position is posted at Senior or Principal level, with responsibilities and impact expectations tailored to the successful candidate's experience and seniority. In the first three to six months, success includes establishing Auth0 and RBAC across key systems, enabling developers to provision cloud infrastructure through infrastructure as code, advancing the secure and segmented hybrid-cloud migration, and bringing a SIEM online to monitor critical infrastructure.
Requirements
- Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar.
- Experience with Kubernetes, including managed or proprietary Kubernetes distributions.
- Hands-on experience building and managing infrastructure as code with Terraform and Ansible.
- Production experience with GCP, or experience with Azure or AWS and willingness to work in GCP.
- Proven experience deploying, tuning, and operating a SIEM solution.
- Experience with PKI, including certificate management and lifecycle automation.
- Demonstrated incident response experience, including leading investigations and remediation.
- Experience deploying and maintaining artifact storage and secrets management systems.
- Understanding of network segmentation and secure network design across on-premises and cloud environments.
Nice To Haves
- Broader security engineering experience beyond infrastructure, such as application or product security.
- Experience designing security architecture for organizations moving from on-premises to hybrid cloud.
- Familiarity with endpoint detection and response (EDR) tooling and deployment.
Responsibilities
- Define, implement, and operate the identity platform, including Auth0 and role-based access control across internal systems and cloud environments.
- Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities.
- Design and manage public key infrastructure, including certificate issuance, rotation, and revocation.
- Lead the migration of on-premises workloads to a secure hybrid-cloud environment on GCP.
- Build and maintain developer cloud infrastructure using Terraform and Ansible.
- Design and enforce network segmentation between on-premises, cloud, and critical infrastructure environments.
- Deploy and maintain artifact storage and other core developer tooling with security built in.
- Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely.
- Select, deploy, and operate a SIEM solution covering critical infrastructure.
- Build and lead incident response processes from detection and triage through remediation and post-incident review.
Benefits
- Fully company-paid medical, dental, and vision insurance for employees and dependents.
- Company-paid life and disability coverage, with voluntary options to add more.
- Supplemental hospital, critical illness, and accident coverage available.
- Unlimited paid time off.
- 13 paid company holidays.
- Remote-first culture with a company-provided computer and home office setup.
- Competitive salary and equity.
- 401(k) with company matching, eligible from day one.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
