infrastructure security engineer

YO IT CONSULTING

<div>Job Title: Sr. Infrastructure Security Engineer
Job Type: Full-Time
Location: Remote
The Role
We&rsquo;re looking for an infrastructure security engineer who thinks like a builder, not an auditor. You&rsquo;ll design and evolve the security foundations of a fast-moving, AI-native organization, where the goal isn&rsquo;t just to reduce risk, but to enable us to move faster safely.
This role sits at the intersection of systems engineering, security research, and applied automation.
What You&rsquo;ll Do
<div><ul><li>Architect security systems across AWS, GCP, and Azure that scale with rapid product iteration.</li></ul>
<ul><li>Build automated guardrails and self-healing infrastructure to eliminate entire classes of vulnerabilities.</li></ul>
<ul><li>Design and implement Zero Trust primitives, identity, access, and policy as code, from first principles.</li></ul>
<ul><li>Develop Detection-as-Code pipelines, treating detection logic like production systems (versioned, tested, deployable).</li></ul>
<ul><li>Explore and deploy AI-native approaches to threat modeling, anomaly detection, and incident response.</li></ul>
<ul><li>Partner closely with engineering and research teams to embed security into the development lifecycle.</li></ul>
<ul><li>Write clearly and think clearly, security decisions should be legible, reviewable, and composable.</li></ul>
<ul><li>Continuously rethink assumptions and evolve our security posture as new threats and paradigms emerge.</li></ul>
</div>What We&rsquo;re Looking For
<div><ul><li>Deep experience securing distributed, multi-cloud systems (AWS, GCP, Azure).</li></ul>
<ul><li>Strong programming ability (Python, Go, Rust, or similar) with a bias toward automation and systems thinking.</li></ul>
<ul><li>Experience with Infrastructure as Code (Terraform, Pulumi, etc.) and integrating security into CI/CD pipelines.</li></ul>
<ul><li>Strong understanding of identity systems, least privilege, and Zero Trust architectures.</li></ul>
<ul><li>Familiarity with modern detection ecosystems (e.g., Sigma, Panther, GuardDuty, SCC) and signal quality challenges.</li></ul>
<ul><li>A mindset that treats security as an engineering and systems problem, not compliance.</li></ul>
<ul><li>Comfort working in a highly asynchronous, writing-heavy, and fast-paced environment.</li></ul>
</div>Nice to Have
<div><ul><li>Experience securing Kubernetes and containerized workloads at scale.</li></ul>
<ul><li>Contributions to open-source security tools or research.</li></ul>
<ul><li>Experience applying or experimenting with AI/ML in security contexts.</li></ul>
<ul><li>Strong opinions about how security should evolve in an AI-first world.</li></ul></div></div>

Infrastructure Security Engineer - Remote

MiniMed

<div>We anticipate the application window for this opening will close on - 24 Apr 2026
At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world.
<h1 class="jobSectionHeader">About the Role
</h1>We are seeking an experienced Infrastructure Security Engineer to design, implement, and maintain security controls that protect enterprise systems, applications, and data. This role will partner closely with IT, engineering, cloud, and risk teams to reduce cyber risk, improve security posture, and support compliance with regulatory and industry standards. The ideal candidate brings deep hands-on technical expertise, strong problem-solving skills, and the ability to influence secure design decisions across the organization.
Responsibilities may include the following and other duties may be assigned. 
Detection, Response &amp; Vulnerability Management
<ul><li>Support security monitoring, detection engineering, and incident response activities
</li><li>Lead or support investigations of security incidents and recommend corrective actions
</li><li>Manage vulnerability scanning, assessment, prioritization, and remediation efforts
</li><li>Work with infrastructure and application teams to reduce risk through secure configuration and patching
</li></ul>Cloud &amp; Application Security
<ul><li>Implement and manage cloud security controls across platforms such as AWS, Azure, or GCP
</li><li>Support secure CI/CD pipelines, application security testing, and secrets management
</li><li>Partner with development teams to embed security into the SDLC (DevSecOps practices)
</li></ul>Identity, Access &amp; Data Protection
<ul><li>Design and support IAM solutions including authentication, authorization, and privileged access management
</li><li>Implement encryption, key management, and data protection controls
</li><li>Ensure least privilege access and secure identity lifecycle management
</li><li>Implement and manage Data Loss Prevention controls
</li></ul>Governance, Risk &amp; Collaboration
<ul><li>Align security controls with regulatory and compliance requirements (e.g., ISO 27001, NIST, SOC 2, HIPAA, GDPR as applicable)
</li><li>Contribute to security policies, standards, and technical procedures
</li><li>Provide security guidance and mentorship to junior engineers and cross functional teams
</li><li>Communicate risks and recommendations clearly to technical and non technical stakeholders
</li></ul>Security Engineering &amp; Architecture
<ul><li>Design, implement, and maintain security solutions across on prem, cloud, and hybrid environments
</li><li>Evaluate and integrate security technologies such as endpoint protection, IAM, network security, and cloud security controls
</li><li>Develop and maintain security architecture patterns, standards, and technical documentation
</li><li>Perform threat modeling and security design reviews for new systems and applications
</li></ul>Required Knowledge and Experience:
Requires mastery level knowledge of specialty area and working knowledge of several other areas, typically obtained through advanced education combined with experience.
 
May have deep knowledge of project management.
 
10+ years of experience with a bachelor&rsquo;s degree or 8+ years of experience with an advanced degree or 12+ years of experience with a high school diploma or equivalent.
Preferred Qualifications:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, Engineering, or equivalent experience
</li><li>5&ndash;10 years of hands on experience in security engineering, cybersecurity, or related technical roles
</li><li>Strong understanding of: Network security (firewalls, IDS/IPS, VPNs, segmentation)
</li><li>Operating system security (Windows, Linux)
</li><li>Cloud security fundamentals and shared responsibility models
</li><li>Experience implementing and operating enterprise security tools
</li><li>Solid scripting or automation skills (e.g., Python, PowerShell, Bash)
</li><li>Proven ability to analyze security risks and design practical mitigation strategies
</li><li>Experience in regulated industries (healthcare, medical devices, finance, or similar)
</li><li>Hands on experience with one or more cloud platforms (AWS, Azure, GCP
</li><li>Knowledge of DevSecOps tooling and practices
</li><li>Security certifications such as CISSP, CISM, CCSP, GIAC, or equivalent
</li><li>Experience with infrastructure as code and configuration management tools
</li><li>Strong analytical and problem solving skills
</li><li>Ability to work independently and lead technical initiatives
</li><li>Excellent written and verbal communication skills
</li><li>Collaborative mindset with the ability to influence without authority
</li><li>Attention to detail with a risk based approach to security
</li></ul>The base salary range is applicable across the United States, excluding Puerto Rico and specific locations in California. The offered rate complies with federal and local regulations and may vary based on factors such as experience, certification/education, market conditions, and location. Compensation and benefits information pertains solely to candidates hired within the United States (local market compensation and benefits will apply for others).
<h1 class="jobSectionHeader">Physical Job Requirements
</h1>The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.
The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role.
<h1 class="jobSectionHeader">Benefits &amp; Compensation
</h1>MiniMed offers a competitive salary and flexible benefits package
At MiniMed, we put people first. A commitment to our employees lives at the core of our values: We recognize their contributions. They share in the success they help create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every stage of your career and life.
Salary ranges for U.S (excl. PR) locations (USD):$141,600.00 - $212,400.00 
 
At MiniMed, we are committed to supporting the well-being and financial security of our employees. Regular employees working 20 or more hours per week are eligible for a robust benefits package, including health, dental, and vision insurance, as well as access to a Health Savings Account, Healthcare Flexible Spending Account, life insurance, long-term disability leave, and a dependent daycare spending account. In addition, all regular employees enjoy incentive plans, a 401(k) plan with company match, short-term disability coverage, paid time off and holidays, participation in our Employee Stock Purchase Plan, and access to our Employee Assistance Program. Eligible employees may also benefit from our Non-qualified Retirement Plan Supplement and Capital Accumulation Plan, subject to IRS minimum earnings requirements. Please note that &ldquo;regular employees&rdquo; refers to those who are not temporary staff, such as interns, and some benefits may not apply to employees in Puerto Rico. 
MiniMed Benefits Overview
<h1 class="jobSectionHeader">About MiniMed
</h1>MiniMed is a full-stack insulin delivery company dedicated to supporting people living with diabetes through every step of their journey &mdash; when and how they need it. For more than 40 years, we&rsquo;ve been committed to redefining what&rsquo;s possible: intelligent dosing systems designed for real life, predictive insights that stay a step ahead, and always on support when it&rsquo;s needed most. At the heart of everything we do is a simple Mission: to make every day a better day for people with diabetes. 
It is the policy of MiniMed to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, familial status, membership or activity in a local human rights commission, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state, or local law. In addition, MiniMed will provide reasonable accommodations for qualified individuals with disabilities. 
If you are applying to perform work for MiniMed in any position which will involve performing at least two (2) hours of work on average each week within the unincorporated areas of Los Angeles County, you can find here a list of all material job duties of the specific job position which MiniMed reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of a conditional offer of employment. MiniMed will consider for employment qualified job applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.</div>

Infrastructure Security Engineer

Wells Fargo

<div>About this role 
 
Join an exciting, fast-paced organization working on cutting edge encryption, tokenization and key management technologies, leveraged to protect information companywide. Wells Fargo is seeking a Lead Information Security Engineer working with CipherTrust Transparent Data Encryption. This role requires strong Information Technology and Information Security foundational knowledge, as well as experience with and awareness of encryption and key management technologies and engineering practices. The role closely partners with stakeholders across Wells Fargo Technology Infrastructure, Cybersecurity and lines of business to drive information protection product delivery, support business priorities and oversees the allocation of people and financial resources to ensure commitments are met and align with strategic objectives.
 
 
In this role, you will:<ul><li>
Focus on delivering commitments aligned to enterprise strategic priorities</li><li>
Build support for strategies with business and technology leaders</li><li>
Guide development of actionable roadmaps and plans</li><li>
Identify opportunities and strategies for continuous improvement of product delivery practices</li><li>
Set risk management guidelines and partner with stakeholders to implement key risk initiatives</li><li>
Collaborate and influence all levels of professionals including more experienced managers</li><li>
Interface with external agencies, regulatory bodies, or industry forums</li><li>
Interpret and develop range of policies and procedures for functions with moderate to higher complexity and risk</li><li>
Lead efforts to facilitate / manage projects, products, strategic plans and execute other operational aspects on behalf of leader</li><li>
Lead efforts to define / manage required business plans (i.e. draft proposals &amp; plans) and support related initiatives across products - including analyzing &amp; identifying opportunities for efficiencies and innovation across internal processes and the tools to support.</li><li>
Support the product line general manager to solve problems, manage disputes and deal with any issues impacting the TI organization.</li></ul>
Required Qualifications:<ul><li>
5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li><li>
Hands-on experience designing, deploying, and operating Thales CipherTrust Transparent Encryption (CTE) for unstructured data at rest, including file, folder, and volume-level encryption
</li><li>Deep understanding of CTE agent architecture, GuardPoints, policies, and In-Place / Live Data Transformation (IDT/LDT) concepts and trade-offs
</li><li>Proven experience administering CipherTrust Manager (formerly DSM/Vormetric) for: Centralized key lifecycle management, Policy enforcement and Audit and access logging
</li><li>Strong engineering experience with Linux (RHEL, SLES), Windows, and AIX in enterprise environments
</li><li>Practical knowledge of supported file systems (e.g., ext3/ext4, NTFS, NFS, raw disk encryption scenarios) and their interaction with CTE agents</li><li>
Ability to assess kernel compatibility, AES-NI requirements, and host readiness prior to encryption enablement
</li><li>Strong understanding of data-at-rest encryption principles, including: Threat models beyond disk theft (privileged user access, data exfiltration), Why file/folder-level encryption is required in addition to disk encryption, Knowledge of AES-256 encryption, hardware acceleration (AES-NI), and performance considerations in high-IO workloads and Experience operating encryption solutions in regulated environments
</li><li>Experience deploying and managing CTE agents using automation frameworks (e.g., Ansible) rather than manual installs</li><li>
Ability to design repeatable, scalable onboarding patterns for thousands of hosts and large NAS environments</li><li>
Familiarity with change management constraints (reboots, maintenance windows, encryption sequencing) in production systems</li></ul>
Desired Qualifications:<ul><li>
5+ years of advanced information security architecture, design, or consulting experience</li><li>
Strong knowledge of hardware security modules (HSMs) and/or security appliances</li><li>
Strong knowledge of certificate ciphers and encryption algorithms.</li><li>
Strong knowledge, understanding and prior experiences with regulatory drivers impacting a complex and dynamic global technology environment.</li><li>
MS or MBA degree in Business, Finance, Computer Science, Engineering, or related fields</li><li>
CISSP or CISM or CISA certifications</li><li>
Microsoft Azure and/or Google Cloud certifications</li></ul><ul><li>
Practical experience building security solutions through abstraction layer and automation practices.</li><li>
Policy development experience</li><li>
Experience with the development and execution of strategy in a large enterprise</li><li>
Experience creating visually dynamic presentations</li></ul>
Job Expectations:<ul><li>
Ability to work on-site in one of the listed locations in a hybrid environment</li><li>
This position is not available for visa sponsorship</li></ul>
Pay Range 
 
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities. 
$119,000.00 - $187,000.00 
Benefits
 
 
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.<ul><li>
Health benefits</li><li>
401(k) Plan</li><li>
Paid time off</li><li>
Disability benefits</li><li>
Life insurance, critical illness insurance, and accident insurance</li><li>
Parental leave</li><li>
Critical caregiving leave</li><li>
Discounts and savings</li><li>
Commuter benefits</li><li>
Tuition reimbursement</li><li>
Scholarships for dependent children</li><li>
Adoption reimbursement</li></ul>
Posting End Date: 
17 Apr 2026 
<ul><li>Job posting may come down early due to volume of applicants.
</li></ul> 
We Value Equal Opportunity 
 
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. 
 
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements. 
 
Applicants with Disabilities 
 
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo . 
 
Drug and Alcohol Policy 
 
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more. 
 
Wells Fargo Recruitment and Hiring Requirements: 
 
a. Third-Party recordings are prohibited unless authorized by Wells Fargo. 
 
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Lead Infrastructure Security Engineer Data at Rest Encryption

Search 10000+ Infrastructure security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 infrastructure security engineer jobs Near Me

Infrastructure Security Engineer - Remote

Infrastructure Security Engineer - Remote

Infrastructure Security Engineer

Infrastructure Security Engineer - Remote

Infrastructure Security Engineer - Remote

Infrastructure Security Engineer - Remote

Lead Infrastructure Security Engineer Data at Rest Encryption