Security Engineer: Vault, IAM & Audit Readiness

INFRO; Northern (KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

INFRO is seeking a security-focused engineer to own credential storage, including key rotation and the key-encryption-key lifecycle. You will strengthen authentication and authorization for customers and staff with MFA, sessions, and RBAC, and run threat modelling for new features.

You will build detection for leaked keys, write runbooks, and prepare the platform for audits and security questionnaires. You will also contribute to documentation and ensure secure software practices across a

Qualifications

• 4+ years in application or product security with hands-on engineering in production code.
• Practical cryptography knowledge: authenticated encryption, key management.
• Experience with web authentication and secure API design.
• Ability to write and review TypeScript.

Responsibilities

• Own credential storage, key rotation and the key-encryption-key lifecycle.
• Harden authentication and authorization for customers and staff, including MFA, session handling and role-based access.
• Run threat modelling and security review for new features, and fix what you find.
• Build detection for leaked keys and abusive traffic, and write the runbooks for responding to them.
• Prepare the platform and its documentation for independent audits and customer security questionnaires.

Skills

Security engineering

Cryptography

Web authentication

TypeScript

Tools

OAuth

CSRF

CORS

AES-256-GCM

Job description

INFRO is seeking a security-focused engineer to own credential storage, including key rotation and the key-encryption-key lifecycle. You will strengthen authentication and authorization for customers and staff with MFA, sessions, and RBAC, and run threat modelling for new features.

You will build detection for leaked keys, write runbooks, and prepare the platform for audits and security questionnaires. You will also contribute to documentation and ensure secure software practices across a