Hybrid-Cloud Infrastructure Security Engineer

positron.ai; USA; Remote; USD 140.000 - 190.000; Vollzeit

Benefits dieser Stelle

Remote-first

Company computer

Medical, dental, vision, life, and dis

Disability coverage

401(k) with company match

Unlimited PTO

13 paid holidays

Zusammenfassung

positron.ai is seeking a senior security engineer to own identity, infrastructure, and developer security foundations during a migration from on-prem to a hybrid-cloud setup. You will shape authentication, provisioning, segmentation, and threat detection for critical engineering systems.

The role requires hands-on expertise in IAM, RBAC, least-privilege controls, PKI, and IaC with Terraform and Ansible, with migration experience to GCP and a focus on securing developer tooling across teams.

Qualifikationen

• Senior/principal-level security engineer with hands-on infra security experience.
• Experience with identity management, RBAC, and least-privilege controls.
• Experience migrating on-prem workloads to a GCP-based hybrid-cloud environment.
• Proficient with infrastructure as code using Terraform and Ansible.
• Knowledge of PKI and certificate lifecycle management.

Aufgaben

• Operate the identity platform across internal systems and cloud environments (Auth0).
• Establish least-privilege policies and access lifecycle processes for people, service accounts, and machine identities.
• Manage public key infrastructure including certificate issuance, renewal, and revocation.
• Lead migration of on-prem workloads to a secure hybrid-cloud environment on GCP.
• Build and maintain developer cloud infrastructure using Terraform and Ansible.
• Define network segmentation and secure handling of secrets and artifacts; support threat detection and response for critical systems.

Kenntnisse

Identity & access management

RBAC

Least-privilege controls

Hybrid-cloud

Terraform

Ansible

PKI & certificate lifecycle

Threat detection & response

Cloud security

Tools

Auth0

GCP

Terraform

Ansible

Jobbeschreibung

positron.ai is seeking a senior security engineer to own identity, infrastructure, and developer security foundations during a migration from on-prem to a hybrid-cloud setup. You will shape authentication, provisioning, segmentation, and threat detection for critical engineering systems.

The role requires hands-on expertise in IAM, RBAC, least-privilege controls, PKI, and IaC with Terraform and Ansible, with migration experience to GCP and a focus on securing developer tooling across teams.