Infrastructure Security – Tech Lead

Softswiss; Georgia; On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Private health insurance

Sports benefits

Free English lessons

Paid time off

Maternity leave support

Job summary

Softswiss is seeking an Infrastructure Security Tech Lead to guide the technical direction and architecture of our security infrastructure. The successful applicant will define and lead the Infrastructure Security strategy, ensuring all systems are secure and scalable, adhering to best practices.

Your expertise in infrastructure security will be vital as you lead reviews, manage vulnerabilities, and mentor team members. Join us in strengthening our security posture while fostering a collaborative environment.

Qualifications

• 7+ years in infrastructure security, including 3+ years in an Architect or Lead role.
• Deep hands-on experience with at least one major cloud provider focused on security services.
• Strong knowledge of Common Secure Network Architectures, Firewalls, IDP/IPS environments.

Responsibilities

• Define technical direction and architectural decisions across all Infrastructure Security domains.
• Lead security infrastructure reviews for new and existing systems.
• Own the Vulnerability Management process across infrastructure domains.

Skills

Infrastructure security expertise

Analytical problem-solving skills

Cloud security services (AWS, GCP, OCI)

Kubernetes security

Python/Go for automation

Tools

SaltStack

Terraform

Splunk

Docker

Job description

Security | Infrastructure Security – Tech Lead

SOFTSWISS is looking for an Infrastructure Security Tech Lead to take ownership of the technical direction and architecture of our security infrastructure.

Purpose of the role:

You will define and lead the Infrastructure Security strategy and architecture, ensuring that all systems are secure, scalable, and aligned with modern security standards and best practices.

Key responsibilities:

• Define technical direction and architectural decisions across all Infrastructure Security domains
• Lead security infrastructure reviews for new and existing systems
• Develop and maintain technical standards, security policies, and security baselines across domains
• Own the Vulnerability Management process across infrastructure domains
• Technical growth and mentorship of team members

Required Experience:

• 7+ years in infrastructure security, including 3+ years in an Architect or Lead role
• Strong investigative and analytical problem-solving skills.
• Practice in building security processes in the corporate environment
• Deep hands‑on experience with at least one major cloud provider (AWS, GCP, or OCI) focused on security services
• Server hardening expertise: CIS Benchmarks, DISA STIG, immutable OS concepts (e.g., Talos Linux)
• Proficiency in IaC tooling: SaltStack and Terraform
• Deep expertise in Kubernetes security: RBAC, Pod Security Standards, Admission Controllers, NetworkPolicy
• Experience in development and automation (Python/Go)
• Experience in SQL, ESQL/DSL (ElasticSearch)
• Experienced in technical mentorship and task decomposition for teammates
• Strong knowledge of Common Secure Network Architectures, Firewalls, IDP/IPS environments
• Hands‑on experience designing and implementing Zero Trust Architecture (ZTA)
• Structured written and oral communication to ensure clarity
• Ability to formalise security requirements into policies, standards, and control frameworks
• Familiarity with enterprise security architecture frameworks (TOGAF/SABSA)
• Upper Intermediate or higher English level

Nice to have:

• Practice with Splunk, Clickhouse.
• Experience creating network segmentation through various technologies such as routing, virtual networking, and SDN.
• Public contributions: open-source projects, conference talks (DEF CON, Black Hat, OWASP AppSec)
• Experience with Docker, Kubernetes, Istio and similar technologies
• Knowledge of IAM, SSO, VPN, OpenID, SAML
• Strong knowledge of endpoint & infrastructure security such as Audit.d, sysmon, apparmor, tetragon, selinux, etc

Main Advantages

• Private health insurance
• Sports benefits
• Free English lessons (online)
• Local language courses
• Paid time off
• Maternity leave support
• Referral program rewards
• Upskilling, internal workshops, and participation in professional conferences and corporate events