Senior Infrastructure Security Engineer, Cloud & Kubernetes

Harvey; United States; Remote; USD 231,000 - 340,000; Full time

Job summary

Harvey is seeking a Staff Infrastructure Security Engineer to lead secure-by-default infrastructure across our multi-tenant SaaS platform. You will define patterns and guardrails, mentor engineers, and collaborate with product teams to reduce risk while enabling rapid delivery.

The role focuses on securing cloud configurations, least privilege, and tenant isolation, with a strong engineering-first mindset and a commitment to scalability and security.

Qualifications

• 8+ years of security and/or software engineering experience.
• Strong fundamentals in networking, OS, and crypto protocols.
• In-depth Kubernetes knowledge and cloud security experience.
• Proven ability to drive security initiatives across teams.
• Experience with cloud providers (AWS/Azure/GCP).
• Experience setting security standards at scale.

Responsibilities

• Incorporate secure design principles into our cloud architecture.
• Establish reusable security patterns and guardrails for teams.
• Develop isolation mechanisms (sandboxing) with product teams.
• Review security-critical changes and own IaC security parts.
• Partner with engineering/product to translate security needs into investments.
• Define infrastructure security architecture and multi-quarter roadmaps.
• Mentor other security engineers and raise the technical bar.

Skills

Security engineering

Networking

Operating systems

cryptographic protocols

Kubernetes

Cloud security

Cross-functional leadership

Security standards

Tools

Kubernetes

Terraform / IaC

Cloud platforms

Admission Controllers

Job description

Harvey is seeking a Staff Infrastructure Security Engineer to lead secure-by-default infrastructure across our multi-tenant SaaS platform. You will define patterns and guardrails, mentor engineers, and collaborate with product teams to reduce risk while enabling rapid delivery.

The role focuses on securing cloud configurations, least privilege, and tenant isolation, with a strong engineering-first mindset and a commitment to scalability and security.