Infrastructure Security Engineer Senior Principal

You will secure and manage the transition from on-premises systems to a hybrid-cloud environment. You will own identity and access management, cloud infrastructure, infrastructure as code, developer tooling, secrets, artifact storage, threat detection, and incident response. You will establish secure authentication, segmentation, provisioning, and monitoring practices for critical systems.

Responsibilities

• Define, implement, and operate the identity platform, including Auth0 and role-based access control
• Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities
• Design and manage PKI, including certificate issuance, rotation, and revocation
• Lead the migration of on-premises workloads to a secure hybrid-cloud environment on GCP
• Build and maintain developer cloud infrastructure using Terraform and Ansible
• Design and enforce network segmentation across on-premises, cloud, and critical infrastructure environments
• Deploy and maintain artifact storage and core developer tooling securely
• Own secrets management and ensure credentials and keys are stored, accessed, and rotated safely
• Select, deploy, and operate a SIEM solution for critical infrastructure
• Build and lead incident response processes from detection and triage through remediation and post-incident review

Requirements

• Expertise in identity and access management, including SSO, RBAC, and Auth0, Okta, or similar identity platforms
• Experience with Kubernetes
• Hands-on experience with Terraform and Ansible
• Production experience with GCP, or Azure or AWS with willingness to work in GCP
• Experience deploying, tuning, and operating a SIEM solution
• Experience with PKI, certificate management, and lifecycle automation
• Incident response experience, including leading investigations and remediation
• Experience deploying and maintaining artifact storage and secrets management systems
• Understanding of network segmentation and secure network design across on-premises and cloud environments

Benefits

• Fully company-paid medical, dental, and vision insurance for employees and dependents
• Company-paid life and disability coverage, with voluntary additional coverage options
• Supplemental hospital, critical illness, and accident coverage
• Unlimited paid time off
• 13 paid company holidays
• Remote-first work culture
• Company-provided computer and home-office setup
• 401(k) with company matching from day one