Infrastructure Security Engineer

Cybersecurity Jobs; Washington (District of Columbia); Sur place; USD 100 000 - 258 000; Plein temps

Avantages offerts par ce poste

Equity

Medical, vision, and dental

401(k)

Disability insurance

Life insurance

Discounts and perks

Résumé du poste

SpaceXSI is seeking an Infrastructure Security Engineer in Washington, DC onsite to design, implement, and maintain secure cloud and hybrid infrastructure. This role emphasizes automation-first security to protect cloud-native applications across multi-cloud and hybrid environments while keeping developer workflows efficient.

You will design secure cloud architectures across AWS, GCP, and Azure, build mission-critical apps in hybrid environments, and develop IaC templates with embedded security

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 3 to 5 years of experience in cloud security or infrastructure security.
• Strong understanding of cloud security principles and compliance frameworks.

Responsabilités

• Design and implement secure cloud architectures across AWS, GCP, and Azure.
• Build and secure hybrid cloud and on-premises applications.
• Create and maintain IaC templates with embedded security controls.
• Support security assessments and audits for cloud infrastructure and services.
• Manage cloud security tools such as CSPM, CWPP, and CASB.
• Monitor and remediate security events across cloud and hybrid systems.

Connaissances

Cloud security

IAM

Automation mindset

DevSecOps

Security assessments

Formation

Bachelor’s degree

Outils

Terraform

CloudFormation

Puppet

Kubernetes

CI/CD tooling

Description du poste

SpaceXSI is seeking an Infrastructure Security Engineer in Washington, DC (onsite) to design, implement, and maintain secure cloud and hybrid infrastructure. This role centers on protecting cloud-native applications across multi-cloud and hybrid environments with an automation-first mindset, helping strengthen security posture while keeping developer workflows moving.

What you’ll be responsible for

• Design and implement secure cloud architectures across multiple platforms (including AWS, GCP, and Azure)
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Create and maintain Infrastructure as Code (IaC) templates that include embedded security controls
• Support regular security assessments and audits for cloud infrastructure and services
• Implement and manage cloud security tools and services such as CSPM, CWPP, and CASB
• Manage identities and roles across cloud and hybrid environments to maintain least privilege
• Monitor and remediate infrastructure to align with regulations and best practices, including PCI, NIST CSF, GDPR, and HIPAA
• Design secure container standards and automation that enable frictionless developer workflows
• Maintain Kubernetes security aligned with current best practices
• Partner with development teams to integrate security best practices into CI/CD pipelines
• Secure and enhance CI/CD pipelines, including integration and maintenance of code scanning platforms
• Monitor and respond to security events and incidents across cloud and hybrid systems
• Maintain SIEM data pipelines to support reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (for example Puppet)
• Develop dashboards and alerts based on security metrics
• Develop and maintain cloud security policies, standards, and procedures
• Own security projects end to end, from identifying issues to implementing solutions
• Stay current on emerging cloud security threats and mitigation strategies

What you’ll bring

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 3 to 5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency in at least one cloud platform: AWS, GCP, or Azure, including associated security services
• Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security posture
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Scripting experience for automation and tooling (such as Python and Bash)
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate

Compensation and benefits

Compensation: $100,000 - $258,000 USD per year

• Equity
• Comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• Short- and long-term disability insurance
• Life insurance
• Various other discounts and perks

Preferred experience (not required)

• Relevant security certifications such as CCSP, CSSK, or AWS Security Specialty
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
• Strong proficiency with Python, Terraform, and configuration management (for example Puppet)
• Hands-on experience building GitHub Actions and workflows
• Experience with observability and security operations tooling (for example Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)
• Experience building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience securing AI/ML workloads in cloud environments
• Experience with banking, money transmission, P2P payments, or similarly regulated financial platforms

Technologies you may work with

• AWS, GCP, Azure
• Infrastructure as Code (IaC), Terraform, CloudFormation
• CSPM, CWPP, CASB
• PCI, NIST CSF, GDPR, HIPAA
• Kubernetes
• CI/CD pipelines, SIEM
• Python, Puppet, Bash
• CloudWatch, Prometheus, Grafana, Wazuh
• GitHub Actions, Karma