Infrastructure Security Engineer

Dataflow Security; United States; Remote; USD 130,000 - 200,000; Full time

Benefits offered by this job

Competitive compensation

Fully remote with flexible schedule

Global wellness program

Job summary

Dataflow Security is seeking an Infrastructure Security Engineer to design and harden our cloud infrastructure. You will review network architectures, secure CI/CD pipelines, and collaborate with developers to implement security changes across AWS-based systems.

The role requires hands-on experience with Terraform, Ansible, IaC security, and security tooling such as Checkov and Trivy. A strong Linux networking background and a blue-team mindset are essential.

Qualifications

• 5+ years of proven work experience in mid or senior positions.
• Strong hands-on experience with Terraform and Ansible.
• Experience securing CI/CD pipelines.
• Experience designing or reviewing secure network flow architectures.
• Solid understanding of AWS IAM, secrets management, and least-privilege design.
• Familiarity with security configuration scanning tools such as Checkov and Trivy.
• Good knowledge of Linux and its networking stack.
• Blue team orientation with defensive hardening.
• Ability to work with developers to fix pipeline/infra issues without blocking delivery.

Responsibilities

• Designing and reviewing network architecture.
• Hardening the CI/CD pipeline.
• Reviewing and hardening the physical and virtual infrastructure.
• Collaborating with developers to plan and implement security changes.

Skills

Terraform

Ansible

IaC security

CI/CD security

Network security design

AWS IAM

Secrets management

Least privilege design

Linux networking

Blue team

Dev collaboration

Tools

Checkov

Trivy

Job description

We are looking to fill the position of an Infrastructure Security Engineer in our team.

Responsibilities:

• Designing and reviewing network architecture.

• Hardening the CI/CD pipeline.

• Reviewing and hardening the physical and virtual infrastructure.

• Part of the information security team, will be closely working with the developers’ team to plan and implement security-related changes.

Requirements:

• Strong hands‑on experience with Terraform and Ansible, with a security-first mindset.
• Proven ability to review and harden Infrastructure-as-Code (identify misconfigurations, enforce least privilege, secure state management in the AWS-based infrastructure).
• Familiarity with security configuration scanning tools (Checkov, Trivy etc.).
• Practical experience securing CI/CD pipelines.
• Experience designing or reviewing secure network flow architectures.
• Solid understanding of AWS IAM models, secrets management and least-privilege design.
• Good knowledge of Linux and its networking stack.
• Blue team orientation, focus on defensive hardening.
• Ability to work closely with dev teams to fix pipeline/infra issues without blocking delivery.
• At least 5 years of proven work experience in mid or senior positions.

What we offer:

• Finance: Highly competitive compensation package.
• Work Environment: Fully remote with flexible work schedule.
• Wellness: We offer a prime wellness program designed to promote a healthy lifestyle, which includes, but not limited to access to gyms around the world, health coaching, and more.

For more information, please review our Recruitment Policy at https://dfsec.com/recruitment-policy-en