Sr Infrastructure Security Engineer - Remote

YO IT Consulting; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

YO IT Consulting is seeking a Sr. Infrastructure Security Engineer to architect and secure systems across AWS, GCP, and Azure. This role will design Zero Trust models and build automated solutions to enhance security while enabling rapid product development.

The ideal candidate has deep experience in securing multi-cloud systems and a strong programming background. Join us in rethinking security as a fundamental engineering challenge in an AI-native environment.

Qualifications

• Deep experience securing distributed, multi-cloud systems (AWS, GCP, Azure).
• Strong programming ability with a bias toward automation and systems thinking.
• Experience with Infrastructure as Code and integrating security into CI/CD pipelines.

Responsibilities

• Architect security systems across AWS, GCP, and Azure that scale with rapid product iteration.
• Build automated guardrails and self-healing infrastructure.
• Design and implement Zero Trust primitives from first principles.

Skills

Securing distributed, multi-cloud systems

Programming (Python, Go, Rust)

Infrastructure as Code (Terraform, Pulumi)

Understanding of identity systems

Job description

Job Title: Sr. Infrastructure Security Engineer

Job Type: Full-Time

Location: Remote

Role

We’re looking for an infrastructure security engineer who thinks like a builder, not an auditor. You’ll design and evolve the security foundations of a fast-moving, AI-native organization—where the goal isn’t just to reduce risk, but to enable us to move faster safely.

This role sits at the intersection of systems engineering, security research, and applied automation.

What You’ll Do

• Architect security systems across AWS, GCP, and Azure that scale with rapid product iteration.
• Build automated guardrails and self-healing infrastructure to eliminate entire classes of vulnerabilities.
• Design and implement Zero Trust primitives—identity, access, and policy as code—from first principles.
• Develop Detection-as-Code pipelines, treating detection logic like production systems (versioned, tested, deployable).
• Explore and deploy AI-native approaches to threat modeling, anomaly detection, and incident response.
• Partner closely with engineering and research teams to embed security into the development lifecycle.
• Write clearly and think clearly—security decisions should be legible, reviewable, and composable.
• Continuously rethink assumptions and evolve our security posture as new threats and paradigms emerge.

What We’re Looking For

• Deep experience securing distributed, multi-cloud systems (AWS, GCP, Azure).
• Strong programming ability (Python, Go, Rust, or similar) with a bias toward automation and systems thinking.
• Experience with Infrastructure as Code (Terraform, Pulumi, etc.) and integrating security into CI/CD pipelines.
• Strong understanding of identity systems, least privilege, and Zero Trust architectures.
• Familiarity with modern detection ecosystems (e.g., Sigma, Panther, GuardDuty, SCC) and signal quality challenges.
• A mindset that treats security as an engineering and systems problem—not compliance.
• Comfort working in a highly asynchronous, writing-heavy, and fast-paced environment.

Nice to Have

• Experience securing Kubernetes and containerized workloads at scale.
• Contributions to open-source security tools or research.
• Experience applying or experimenting with AI/ML in security contexts.
• Strong opinions about how security should evolve in an AI-first world.