Infrastructure Security Engineer

KAYGEN•New York or San Jose, NY

5d•Hybrid

About The Position

KAYGEN is seeking an Infrastructure Security Engineer to join their team. This role involves owning security architecture and control frameworks across various cloud environments (OCI, AWS, Azure, GCP) and self-built data centers. The engineer will implement defense-in-depth controls, lead threat modeling, embed automated security into CI/CD pipelines, and build scalable IaC frameworks. The position requires partnering with engineering, infrastructure, and business teams to integrate security early in the design lifecycle and driving control maturity through assessments and automation. A key aspect of the role is designing and maturing cloud network security controls and establishing centralized security logging. The role is initially for 6 months with potential for extension and is a hybrid position requiring 3 days onsite weekly in either New York, NY or San Jose, CA.

Requirements

Mandarin speaking and written skills – must have.
Ability to integrate into fast-paced teams
Strong communication skills
Capable of working autonomously under supervision

Responsibilities

Own security architecture and control frameworks across self-built data centers, OCI, AWS, Azure, and GCP in hybrid/multi-cloud environments.
Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM for infrastructure.
Lead threat modeling and architecture reviews to identify and mitigate risks before production.
Embed automated security scanning, policy-as-code, and approval gates into CI/CD pipelines.
Build scalable IaC frameworks to enforce security baselines and eliminate configuration drift.
Partner with engineering, infrastructure, and business teams to shift security left in the design lifecycle.
Drive control maturity through regular assessments and a roadmap focused on automation and operational efficiency.
Design and mature cloud network security controls - including VPC architecture, micro segmentation, and firewall policies, and establish centralized security logging and audit trail coverage.
Support incident investigations and root cause analysis.