Infrastructure Security Engineer

SpaceXSI is seeking an Infrastructure Security Engineer to help secure cloud-native application ecosystems spanning multi-cloud and hybrid infrastructure. This role focuses on building reliable security foundations, automating controls, and ensuring that critical environments meet security and regulatory expectations from design through operations.

Working onsite in Washington, DC, you will design secure architectures across cloud platforms, harden infrastructure and containers, and integrate security into delivery pipelines. The position emphasizes infrastructure-as-code, security operations, and proactive ownership of end-to-end security projects.

Responsibilities

• Design and implement secure cloud architectures across multiple cloud platforms, including AWS, GCP, and Azure
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls
• Support regular security assessments and audits of cloud infrastructure and services
• Implement and manage cloud security tools and services such as CSPM, CWPP, and CASB
• Manage identities and roles across cloud and hybrid environments
• Monitor and remediate infrastructure to comply with regulations and best practices including PCI, NIST CSF, GDPR, and HIPAA
• Design and implement secure container standards and automation that support developer workflows
• Maintain Kubernetes security aligned with current best practices
• Collaborate with development teams to integrate security best practices into CI/CD pipelines
• Secure and enhance CI/CD pipelines, including integration and maintenance of code scanning platforms
• Monitor and respond to security events and incidents in cloud and hybrid environments
• Maintain SIEM data pipelines needed for reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management such as Puppet
• Develop dashboards and alerts from security metrics
• Develop and maintain cloud security policies, standards, and procedures
• Own security projects end to end by identifying issues and implementing solutions
• Stay current with emerging cloud security threats and mitigation strategies

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 3–5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency in at least one cloud platform: AWS, GCP, or Azure, and its security services
• Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security posture
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation
• Familiarity with containerization technologies and related security implications
• Knowledge of network security concepts and protocols
• Experience with scripting languages such as Python and Bash for automation and tool development
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate

Technologies

• AWS, GCP, Azure
• Infrastructure as Code (IaC), Terraform, CloudFormation
• CSPM, CWPP, CASB
• PCI, NIST CSF, GDPR, HIPAA
• Kubernetes
• CI/CD pipelines
• SIEM
• Python, Puppet, Bash
• CloudWatch, Prometheus, Grafana, Wazuh
• GitHub Actions, Karma

Compensation and Benefits

• Compensation: $100,000 - $258,000 USD per year
• Equity
• Comprehensive medical, vision, and dental coverage
• Access to a 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Various other discounts and perks

Preferred Skills and Experience

• Relevant security certifications such as CCSP, CSSK, or AWS Security Specialty
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
• Strong proficiency with Python, Terraform, and configuration management such as Puppet
• Hands-on experience building GitHub Actions and workflows
• Experience with observability and security operations tooling such as Prometheus, Grafana, CloudWatch, Karma, and SIEM platforms such as Wazuh
• Experience building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience with securing AI/ML workloads in cloud environments
• Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms