Senior Infrastructure Security Engineer – Hybrid Cloud

Positron; United States; Remote; USD 170,000 - 325,000; Full time

Benefits offered by this job

Fully company-paid medical, dental, &

Vision insurance

Remote-first culture with home office

Unlimited PTO

13 paid holidays

401(k) with company matching

Home office setup provided

Job summary

Positron AI is seeking a Senior/Principal Infrastructure Security Engineer to secure and manage the hybrid-cloud transition. You will own identity management, access control, IaC foundations, secrets, and core developer tooling used daily by hardware and software teams.

This is a hands-on, high-ownership role focusing on authentication foundations, secure provisioning, and threat detection across on‑prem and cloud environments, with a strong emphasis on Terraform/Ansible, Auth0, and PKI.

Qualifications

• Expertise in identity and access management including SSO and RBAC.
• Hands-on with Kubernetes and infrastructure as code (Terraform/Ansible).
• Production experience with cloud platforms (GCP preferred).
• Proven SIEM deployment and incident response experience.
• Experience with PKI, certificate management, and secrets handling.
• Ability to design secure network segmentation for hybrid environments.

Responsibilities

• Define, implement, and operate the IAM platform and RBAC across cloud and internal systems.
• Migrate on-prem workloads to a secure hybrid-cloud environment (GCP).
• Build and maintain IaC for developers using Terraform and Ansible.
• Design and enforce network segmentation between on-prem and cloud.
• Own secrets management and artifact storage security across environments.
• Select, deploy, and operate a SIEM; lead incident response and post-incident reviews.

Skills

IAM & RBAC

Kubernetes

Terraform

Ansible

Auth0

Okta

GCP

AWS/Azure

SIEM

PKI

Incident response

Secrets management

Network segmentation

Artifact storage

Tools

Auth0

Okta

Job description

Positron AI is seeking a Senior/Principal Infrastructure Security Engineer to secure and manage the hybrid-cloud transition. You will own identity management, access control, IaC foundations, secrets, and core developer tooling used daily by hardware and software teams.

This is a hands-on, high-ownership role focusing on authentication foundations, secure provisioning, and threat detection across on‑prem and cloud environments, with a strong emphasis on Terraform/Ansible, Auth0, and PKI.