Senior Infrastructure Security Engineer

Federato

2d•$170,000 - $210,000

About The Position

Federato is hiring a Senior Infrastructure Security Engineer to support security operations and build and maintain the infrastructure behind its AI-native insurance platform. The role combines security engineering responsibilities with cloud infrastructure engineering, working on complex problems in a fast-growing company. On the security side, the engineer will support incident management, improve secure software development practices, streamline customer security questionnaire responses, and plan and exercise business continuity and disaster recovery processes. On the infrastructure side, the engineer will collaborate across teams to support new features, automate infrastructure management, optimize Google Cloud Platform and Kubernetes environments, and improve observability and performance monitoring. The role requires hands-on experience with cloud infrastructure and automation, production Kubernetes, and security certifications such as SOC 2 Type II or ISO 27001. Compensation is listed at $170,000–$210,000 per year. The total compensation package includes stock options, benefits, and additional perks; final offers depend on factors including location, experience, and expertise.

Requirements

5+ years of hands-on experience managing cloud infrastructure and automation.
Experience achieving SOC 2 Type II, ISO 27001, or similar certifications.
Experience with Node.js or Python for backend services in a microservices architecture.
3+ years of experience with cloud providers, preferably Google Cloud Platform (GCP).
3+ years of experience managing Kubernetes clusters in production environments.
Knowledge of asynchronous processing, message queues such as Kafka or Pub/Sub, and event-driven architecture for backend applications.
Experience focused on the success of internal engineering teams.

Responsibilities

Support incident management and resolution; help refine incident management procedures, ensure adherence to them, and facilitate related activities.
Improve the Secure Software Development Lifecycle, including vulnerability scanning and remediation processes, ensure remediation is completed within prescribed timeframes, and develop educational materials for engineers.
Streamline the handling of customer security questionnaires by applying technology and developing tooling or systems.
Assess business continuity threats and develop disaster recovery plans; ensure recurring exercises of those plans are conducted.
Collaborate with cross-functional teams to provide infrastructure support for new features and services.
Enhance and automate infrastructure management using tools such as Terraform, Argo, and GitHub Actions.
Manage and optimize the GCP and Kubernetes (GKE) environment for performance, scalability, and reliability.
Improve the observability stack using tools such as Sentry, Prometheus, Grafana, and Alert Manager for real-time monitoring and proactive alerting.
Set up and maintain performance monitoring tools, including k6, to support performance optimization and capacity planning.