Infrastructure Security Architect

Harvey AI; New York (NY); On-site; USD 231,000 - 340,000; Full time

Job summary

Harvey is looking for a Staff Infrastructure Security Engineer to set the technical direction for secure cloud infrastructure and tenant isolation across our multi‑tenant SaaS platform. You will establish patterns and guardrails, partner with product teams on risk management, and drive security improvements at scale.

You will mentor others while shaping security standards, collaborating with engineering to implement least privilege designs and scalable security controls in AWS/Azure/GCP.

Qualifications

• 8+ years experience in Security Engineering and/or Software Engineering.
• Demonstrated experience writing high‑quality software and building production‑grade infrastructure.
• Strong fundamentals in networking, operating systems, and cryptographic protocols.
• In‑depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors.
• Demonstrated ability to find weaknesses (e.g. privilege escalation) in real‑world cloud environments.
• Experience applying security best practices in cloud environments (AWS, Azure, or Google Cloud).
• Track record of driving cross‑functional security initiatives and influencing engineering decisions.
• Experience setting security standards and best practices at an organizational scale.
• No experience with generative AI or legal required.

Responsibilities

• Incorporate secure design principles into our cloud architecture.
• Establish reusable security patterns, standards, and guardrails that enable product and platform teams to build securely by default.
• Develop isolation mechanisms (e.g. sandboxing) in collaboration with our product engineering team.
• Review security‑critical configuration changes and act as Codeowner for security‑critical parts of our cloud configurations (everything is IaC).
• Partner with Engineering and Product teams to manage risks and vulnerabilities in our Cloud environment.
• Translate security requirements into concrete engineering investments.
• Define infrastructure security architecture and multi‑quarter roadmaps.
• Mentor and develop other security engineers on the team, raising the overall technical bar.

Skills

Security engineering

Kubernetes

Cloud security

Networking

Cryptographic protocols

Tools

IaC (General)

Job description

Harvey is looking for a Staff Infrastructure Security Engineer to set the technical direction for secure cloud infrastructure and tenant isolation across our multi‑tenant SaaS platform. You will establish patterns and guardrails, partner with product teams on risk management, and drive security improvements at scale.

You will mentor others while shaping security standards, collaborating with engineering to implement least privilege designs and scalable security controls in AWS/Azure/GCP.