Infrastructure Security Engineer

SpaceXSI provides a total rewards package built for long-term impact, including equity, comprehensive medical, vision, and dental coverage, 401(k), short and long-term disability, and life insurance, plus various discounts and perks. This onsite role is based in New York, NY and focuses on securing cloud and hybrid infrastructure and strengthening cloud-native application integrity.

What you’ll do

You will design, implement, and maintain secure cloud and hybrid infrastructure across multiple platforms while embedding security across build and run processes. Your work will include securing critical infrastructure, improving security detection and operations capabilities, and creating tooling that supports developer workflows.

• Design and implement secure cloud architectures across multiple cloud platforms (for example AWS, GCP, Azure)
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls
• Assist with security assessments and audits of cloud infrastructure and services
• Implement and manage cloud security tooling such as CSPM, CWPP, and CASB
• Manage identities and roles across cloud and hybrid environments
• Monitor and remediate infrastructure to align with regulations and best practices including PCI, NIST CSF, GDPR, and HIPAA
• Design and implement secure container standards and automation that enable developer workflows
• Maintain Kubernetes security in line with current best practices
• Collaborate with development teams to integrate security best practices into CI/CD pipelines
• Secure CI/CD pipelines and maintain code scanning platforms
• Monitor and respond to security events and incidents in cloud and hybrid environments
• Maintain SIEM data pipelines required for reliable alerting
• Build and maintain security operations infrastructure using Python, Terraform, and configuration management tools such as Puppet
• Develop dashboards and alerts from security metrics
• Develop and maintain cloud security policies, standards, and procedures
• Own security initiatives end to end, from identifying issues through implementing solutions
• Stay current with emerging cloud security threats and mitigation strategies

What you bring

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 3 to 5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency in at least one cloud platform: AWS, GCP, or Azure, including associated security services
• Proven experience securing hybrid AWS/on-premises or multi-cloud environments, including IAM and overall security posture
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Experience with scripting languages such as Python and Bash for automation and tool development
• Proactive mindset with ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate

Preferred skills

• Relevant security certifications such as CCSP, CSSK, or AWS Security Specialty
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
• Strong proficiency with Python, Terraform, and configuration management (for example Puppet)
• Hands-on experience building GitHub Actions and workflows
• Experience with observability and security operations tooling such as Prometheus, Grafana, CloudWatch and Wazuh, as well as SIEM platforms
• Experience building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience securing AI/ML workloads in cloud environments
• Experience with banking, money transmission, P2P payments, or other similarly regulated financial platforms

Compensation

$100,000 - $258,000 USD per year. Base salary is one component of the total rewards package, which also includes equity, comprehensive medical, vision, and dental coverage, 401(k), short and long-term disability insurance, life insurance, and various other discounts and perks.

Technologies you may work with

• AWS, GCP, Azure
• Infrastructure as Code (IaC) (Terraform, CloudFormation)
• CSPM, CWPP, CASB
• Kubernetes, CI/CD
• SIEM (including Wazuh)
• Python, Terraform, Puppet, Bash
• IAM
• Prometheus, Grafana, CloudWatch, Wazuh
• GitHub Actions
• Compliance frameworks and standards: PCI, NIST CSF, GDPR, HIPAA