Infrastructure Security Engineer (Senior/Principal)

Positron AI is seeking a Senior or Principal Infrastructure Security Engineer to secure and lead its transition from on-prem to a hybrid-cloud environment. In this remote role, you will own the identity and access foundation, developer-focused cloud infrastructure and tooling, secure storage for secrets and artifacts, and detection and response capabilities for critical systems.

Working at the intersection of platform security and cloud infrastructure, you will help standardize secure access, automate certificate and secret lifecycles, and ensure critical environments are segmented and monitored as on-prem workloads move to GCP.

Responsibilities

• Define, implement, and operate the identity platform, including Auth0 and RBAC across internal systems and cloud environments.
• Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities.
• Design and manage PKI, including certificate issuance, rotation, and revocation.
• Lead migration of on-prem workloads to a secure hybrid-cloud environment on GCP.
• Build and maintain developer cloud infrastructure using Terraform and Ansible.
• Design and enforce network segmentation between on-prem, cloud, and critical infrastructure environments.
• Deploy and maintain artifact storage and other core developer tooling with security built in from the start.
• Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely.
• Select, deploy, and operate a SIEM solution covering critical infrastructure.
• Build and lead incident response processes, spanning detection and triage through remediation and post-incident review.

Requirements

• Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar.
• Experience with Kubernetes, including managed or proprietary distributions.
• Hands-on experience building and managing infrastructure as code with Terraform and Ansible.
• Production experience with GCP, or experience with Azure or AWS with willingness to work in GCP.
• Proven experience deploying, tuning, and operating a SIEM solution.
• Experience with PKI, including certificate management and lifecycle automation.
• Demonstrated incident response experience, including leading investigations and remediation.
• Experience deploying and maintaining artifact storage and secrets management systems.
• Understanding of network segmentation and secure network design across on-prem and cloud environments.

Technologies

• Auth0, RBAC, PKI, GCP, Terraform, Ansible, Kubernetes, SIEM, Okta

What Success Looks Like

• Within the first three to six months, you will define and stand up the identity foundation, with Auth0 and RBAC in place across key systems.
• Developers will be provisioning cloud infrastructure through infrastructure as code, and on-prem to hybrid-cloud migration will be underway on a secure, segmented foundation.
• A SIEM solution will be live and monitoring critical infrastructure, enabling practical detection and response workflows.

Benefits

• Fully company-paid medical, dental, and vision insurance for you and your dependents.
• Company-paid life and disability coverage, with voluntary options to add more.
• Supplemental hospital, critical illness, and accident coverage available.
• Unlimited paid time off; the company encourages time away to unplug and recharge.
• 13 paid company holidays.
• Remote-first culture with a company-provided computer and home office setup.
• Competitive salary and equity.
• 401(k) with company matching, eligible from day one.

Preferred Qualifications

• Broader security engineering experience beyond infrastructure, such as application or product security.
• Experience designing security architecture for organizations moving from on-prem to hybrid cloud.
• Familiarity with endpoint detection and response (EDR) tooling and deployment.

Visa Support

• Open to candidates currently authorized to work in the U.S.
• Positron AI cannot provide new visa sponsorship for this role, but may facilitate H-1B visa transfers for eligible candidates.

Location: Remote (remote)

Salary: USD 170,000 - 325,000 per year