Infrastructure Security Manager

Chainlink Labs Inc.; New York, Washington, Austin, Chicago (NY, District of Columbia, TX, IL); On-site; USD 75,000 - 125,000; Full time

Job summary

Chainlink Labs is hiring an Infrastructure Security Manager to build and scale security foundations for our infrastructure, cloud environments, and decentralized network. You will lead a small team while actively shaping architecture, implementation, and delivery of secure-by-default platforms.

You will mentor a tight-knit engineering team, implement secure Terraform patterns across AWS and GCP, and drive IAM and secrets management.

Qualifications

• Hands-on experience deploying production-grade Terraform for cloud security (IAM, EKS, VPC) via GitOps.
• Proven experience leading a small engineering team as a player-coach.
• Built infrastructure hardening and IAM standards in organizations without a prior infra security function.
• Experience designing secure IaC and GitOps in production cloud environments.
• Ability to architect and secure cloud infra while embedding security into development workflows.

Responsibilities

• Build and standardize secure infrastructure patterns across AWS and GCP.
• Establish unified IAM and centralized secrets management.
• Deliver secure Terraform and GitOps workflows for deployments.
• Automate infrastructure compliance, logging, and security controls.
• Reduce blast radius by strengthening IAM and cloud security boundaries.
• Lead the evolution of Infrastructure Security into an engineering-enabled capability.

Skills

Terraform

IAM

EKS

VPC

GitOps

Atlantis

ArgoCD

Tools

AWS

GCP

Terraform

Kubernetes

Job description

• Zone 2 (e.g., District of Columbia; Austin, TX; Chicago, IL) Annual cash range: $150K – $200K
• Zone 3 (Remote – Other U.S. locations) Annual cash range: $90K – $125K

The estimated cash compensation for this role is based on job-related factors including relevant skills, experience, qualifications, and geographic location. Chainlink Labs follows a zone-based compensation model. In addition to competitive cash compensation, Chainlink Labs provides long-term incentives and comprehensive benefits. Actual compensation packages are discussed and finalized during the offer process.

Note: For select sales roles, the cash compensation range represents a combination of base salary and sales commission.

About The Role

As the Infrastructure Security Manager, you will establish and scale the security foundations that protect Chainlink’s infrastructure, cloud environments, and decentralized network. This role combines technical leadership with hands‑on engineering, building secure infrastructure standards while enabling engineering teams to deliver quickly through automated, secure-by-default platforms. You will lead a small team while remaining deeply involved in architecture, implementation, and delivery.

Your Impact

Build and standardize secure infrastructure patterns across AWS and GCP, creating a scalable security foundation for future growth.

Establish unified identity and access management alongside centralized secrets management to significantly reduce infrastructure risk.

Deliver secure Terraform and GitOps workflows that provide engineering teams with a secure “paved road” for infrastructure deployments.

Automate infrastructure compliance, logging, and security controls to support SOC 2 Type 2 and banking‑grade operational standards.

Reduce the blast radius of infrastructure compromises by strengthening IAM, platform hardening, and cloud security boundaries across distributed systems.

Lead the evolution of Infrastructure Security into an engineering‑enabled capability that accelerates product delivery while improving organizational security posture.

Requirements

Demonstrated recent, hands‑on experience authoring and deploying production‑grade Terraform for cloud security, including complex IAM, EKS, and VPC implementations through GitOps pipelines such as Atlantis or ArgoCD.

Proven success leading and mentoring a small engineering team while maintaining direct ownership of technical project delivery as a player‑coach.

Built foundational infrastructure hardening and IAM standards from the ground up in an organization without an established infrastructure security function.

Experience designing and implementing secure infrastructure using Infrastructure as Code and GitOps practices in production cloud environments.

Demonstrated ability to architect and secure cloud infrastructure while partnering closely with engineering teams to embed security into development workflows rather than acting as a deployment gatekeeper.

Preferred Requirements

Experience adapting financial services or banking security standards to modern, high‑velocity infrastructure environments.

Background designing security architectures and trust boundaries for highly distributed systems or decentralized service topologies.

Demonstrated experience securing identity and access management across both AWS and GCP environments.

Experience working within DeFi or Web3 environments and understanding the associated infrastructure threat models.

Built and enforced policy‑as‑code controls within CI/CD pipelines using technologies such as OPA, CodeQL, or comparable policy enforcement frameworks.

Designed or operated advanced secrets management or cryptographic infrastructure using technologies such as HSMs, Vault, MPC, or equivalent solutions beyond standard cloud KMS offerings.

All roles with Chainlink Labs are global and remote-based. Unless otherwise stated, we ask that you try to overlap some working hours with Eastern Standard Time (EST).

We carefully review all applications and aim to provide a response to every candidate within two weeks after the job posting closes. The closing date is listed on the job advert, so we encourage you to take the time to thoughtfully prepare your application. We want to fully consider your experience and skills, and you will hear from us regarding the status of your application shortly after the closing date.

Commitment to Equal Opportunity

Chainlink Labs is an equal opportunity employer. All qualified applicants will receive equal consideration for employment in compliance with applicable laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us via this form.

Global Data Privacy Notice for Job Candidates and Applicants

Information collected and processed as part of your Chainlink Labs Careers profile, and any job applications you choose to submit, is subject to our Recruiting Privacy Policy. By submitting your application, you are agreeing to our use and processing of your data as required.