Senior Infrastructure Security Engineer

Jobgether; United States; Remote; USD 170,000 - 210,000; Full time

Benefits offered by this job

Stock options

Remote work

Benefits package

Professional growth

AI technologies exposure

Technical ownership

Innovative culture

Job summary

Jobgether is seeking a Senior Infrastructure Security Engineer to strengthen cloud infrastructure, establish robust security practices, and drive secure software development across the engineering organization. You will oversee GCP, GKE, automation, and observability while guiding incident response and disaster recovery programs.

You will work with cross-functional teams to implement security controls, automation, and scalable infrastructure for an AI-driven platform, with ownership of security

Qualifications

• 5+ years of hands-on experience managing cloud infrastructure and production environments.
• Experience supporting security and compliance certifications such as SOC 2 Type II or ISO 27001.
• At least 3 years with Google Cloud Platform (GCP).
• At least 3 years deploying and maintaining Kubernetes in production.
• Experience with Node.js or Python in microservices.
• Familiar with Kafka and Google Pub/Sub in event-driven architectures.
• Strong knowledge of SSDLC, incident response, and disaster recovery.
• Observability/monitoring with Sentry, Prometheus, Grafana, Alertmanager.
• Automation with Terraform, Argo, and GitHub Actions.
• Excellent collaboration and communication across teams.

Responsibilities

• Support incident management and coordinate responses to security incidents.
• Lead ongoing improvement of incident management procedures and documentation.
• Strengthen SSDLC with security improvements across development processes.
• Oversee vulnerability scanning and remediation within timelines.
• Develop security materials to educate engineering teams on secure practices.
• Streamline handling of customer security questionnaires with tooling and automation.
• Coordinate disaster recovery planning and periodic recovery exercises.
• Collaborate with engineering teams to support feature delivery and platform reliability.
• Improve deployment workflows and infrastructure management automation.
• Maintain and enhance monitoring and observability across cloud environments.

Skills

Cloud infrastructure

Infrastructure automation

Security engineering

Incident response

SSDLC

Observability

Kubernetes

Terraform

Argo

GitHub Actions

Backend languages

Kafka

Pub/Sub

Tools

Terraform

Argo

GitHub Actions

Sentry

Prometheus

Grafana

Alertmanager

k6

Google Pub/Sub

GKE

Kubernetes

Job description

This is an exciting opportunity to join a fast‑growing technology organization developing an AI‑native platform that is transforming traditional insurance operations. As a Senior Infrastructure Security Engineer, you will play a dual role in strengthening cloud infrastructure and establishing robust security practices across the engineering organization. You will oversee critical infrastructure, cloud environments, Kubernetes operations, automation, and system observability while driving improvements to security processes and compliance standards. Working closely with engineering and cross‑functional teams, you will help ensure that systems remain secure, scalable, reliable, and resilient as the business expands. You will also contribute to incident response, disaster recovery planning, and the continuous improvement of secure software development practices. This role offers the opportunity to take ownership of impactful technical initiatives, work with modern cloud‑native technologies, and help shape the security foundations of an innovative AI‑driven platform.

Accountabilities

• Support incident management and resolution activities, helping coordinate responses, investigate security incidents, and implement effective remediation measures.
• Lead the continuous improvement of incident management procedures, ensuring that established processes are documented, followed consistently, and regularly reviewed.
• Strengthen the Secure Software Development Lifecycle (SSDLC) by implementing security improvements across software development processes, vulnerability detection, and remediation workflows.
• Oversee vulnerability scanning and remediation activities, ensuring identified security issues are prioritized and addressed within established timelines.
• Develop security documentation, educational resources, and awareness materials to help engineering teams adopt secure development practices.
• Streamline the handling of customer security questionnaires by developing tools, automations, and systems that improve response efficiency and accuracy.
• Assess potential business continuity risks and develop comprehensive disaster recovery and business continuity plans.
• Coordinate recurring disaster recovery exercises and validate the effectiveness of established recovery procedures.
• Collaborate with cross‑functional engineering teams to provide infrastructure support for new features, services, and platform capabilities.
• Improve and automate infrastructure management and deployment workflows using tools such as Terraform, Argo, and GitHub Actions.
• Manage, maintain, and optimize Google Cloud Platform (GCP) infrastructure and Kubernetes (GKE) environments, ensuring scalability, availability, performance, and reliability.
• Enhance the organization’s observability capabilities by maintaining and improving monitoring systems using Sentry, Prometheus, Grafana, and Alertmanager.
• Implement and maintain performance monitoring solutions, including k6 and similar tools, to identify bottlenecks, monitor system health, and support capacity planning.
• Establish proactive monitoring and alerting mechanisms to detect operational issues early and minimize service disruptions.
• Collaborate with backend engineering teams to support reliable microservices architectures, asynchronous processing, and event‑driven infrastructure.
• Contribute to compliance and security initiatives, supporting the implementation and maintenance of industry‑recognized standards and certifications.
• Identify opportunities to improve internal engineering efficiency, infrastructure reliability, security maturity, and operational processes.

Requirements

• At least 5 years of hands‑on experience managing cloud infrastructure, infrastructure automation, and production environments.
• Demonstrated experience supporting or achieving security and compliance certifications such as SOC 2 Type II, ISO 27001, or equivalent frameworks.
• At least 3 years of practical experience working with cloud providers, preferably Google Cloud Platform (GCP).
• At least 3 years of experience deploying, managing, and maintaining Kubernetes clusters in production environments.
• Strong understanding of cloud‑native infrastructure, containerisation, infrastructure‑as‑code principles, and automated deployment practices.
• Practical experience with infrastructure automation and orchestration tools such as Terraform, Argo, and GitHub Actions.
• Experience with Node.js or Python for backend services, particularly within microservices‑based architectures.
• Familiarity with asynchronous processing, message queues, and event‑driven architectures, including technologies such as Kafka and Google Pub/Sub.
• Knowledge of security engineering principles, including vulnerability management, secure software development practices, incident response, and remediation processes.
• Understanding of business continuity planning, disaster recovery strategies, operational resilience, and security risk management.
• Experience implementing observability and monitoring solutions using tools such as Sentry, Prometheus, Grafana, and Alertmanager.
• Familiarity with performance testing and monitoring tools, including k6 or equivalent solutions.
• Strong analytical and troubleshooting skills, with the ability to investigate complex infrastructure and security issues and develop effective solutions.
• Excellent collaboration and communication skills, with the ability to work across engineering teams and support internal stakeholders.
• A proactive, ownership‑driven mindset, with a strong focus on improving internal engineering productivity, operational efficiency, and technical reliability.
• Ability to adapt to a fast‑paced, evolving technology environment and continuously learn emerging cloud, infrastructure, and security technologies.

Benefits

• Competitive compensation: Annual salary ranging from US$170,000 to US$210,000, with final offers determined by experience, expertise, and geographic location. Canadian compensation should be confirmed with the hiring team.
• Equity participation: Stock options, providing an opportunity to participate in the organization’s long‑term growth.
• Comprehensive benefits package: Access to employee benefits and additional perks.
• Remote working environment: Opportunity to work remotely while collaborating with a distributed engineering team.
• Professional growth: Work with advanced AI technologies and modern cloud‑native infrastructure while developing expertise in security engineering and platform reliability.
• Technical ownership: Significant opportunities to lead infrastructure and security initiatives and influence engineering standards and practices.
• Innovative culture: Join a fast‑growing organization that values experimentation, first‑principles thinking, continuous learning, and practical problem‑solving.
• Collaborative environment: Work alongside talented engineering professionals who value transparency, teamwork, adaptability, and shared success.
• Meaningful impact: Help build secure, scalable, and resilient infrastructure supporting the transformation of the insurance industry through AI.