infrastructure security engineer

Magnet

<div>
 
 
 Employer Overview
 
 
 
 A national-scale private cloud platform provides secure, integrated IT services across multiple subsidiaries. The platform delivers
 
 multi-tenant, high-availability environments
 
 with advanced network and application security, supporting compliance, Zero Trust access, and secure workload hosting across hybrid infrastructures.
 
 
 
 
 
 
 Job Summary
 
 
 
 The Security Infrastructure Engineer is responsible for designing, implementing, and operating the security infrastructure of the private cloud platform. The role ensures
 
 secure network and application access, tenant-level segmentation, and Zero Trust principles
 
 , while maintaining high availability and compliance across multi-site environments.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Design and operate Fortinet security platforms (NGFW, WAF, ADC, NAC, FortiAuthenticator, Sandbox)
 </li>
 <li>
 Implement and manage tenant-level security segmentation and firewall policies
 </li>
 <li>
 Integrate Zero Trust access solutions (e.g., AppGate or equivalent)
 </li>
 <li>
 Manage north-south and east-west traffic inspection and security policies
 </li>
 <li>
 Support secure application publishing and WAF protection
 </li>
 <li>
 Collaborate with SOC teams for incident response and threat mitigation
 </li>
 <li>
 Ensure compliance with security policies and regulatory requirements
 </li>
 <li>
 Support disaster recovery and high availability for security infrastructure
 </li>
 <li>
 Optimize security performance and scalability across multi-tenant environments
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Networks, Computer Engineering, or related field (preferred)
 </li>
 <li>
 6&ndash;10 years in network and infrastructure security
 </li>
 <li>
 Hands-on experience with enterprise security platforms in large-scale environments
 </li>
 <li>
 Proven experience with TCP/IP, routing, and network security principles
 </li>
 <li>
 Familiarity with SIEM integration and incident response coordination
 </li>
 <li>
 Strong analytical and problem-solving abilities
 </li>
 <li>
 Excellent communication and collaboration skills
 </li>
 <li>
 Detail-oriented with proactive security mindset
 </li>
 <li>
 Ability to work independently and in cross-functional teams
 </li>
 <li>
 Fortinet ecosystem: FortiGate, FortiWeb, FortiADC, FortiNAC, FortiAuthenticator, FortiSandbox
 </li>
 <li>
 Firewall policy design and tenant-level network segmentation
 </li>
 <li>
 Zero Trust architecture and secure remote access
 </li>
 <li>
 DDoS protection and traffic filtering
 </li>
 <li>
 Application security and WAF management
 </li>
 <li>
 Integration with SIEM and SOC platforms
 </li>
 <li>
 Proficiency with security management, monitoring, and orchestration tools
 </li>
 <li>
 Familiarity with hybrid and multi-site cloud environments
 </li>
 <li>
 Fluency in English (written and spoken)
 </li>
 <li>
 Ability to maintain 24x7 security infrastructure availability
 </li>
 <li>
 Capacity to implement secure access and segmentation across multi-tenant environments
 </li>
 <li>
 Capability to support DR and high-availability operations
 </li>
 <li>
 Ability to optimize security performance and enforce compliance policies
 </li>
 <li>
 Fortinet NSE4 / NSE7 / NSE8
 </li>
 <li>
 CISSP or equivalent security certification
 </li>
 <li>
 CCNP Security or equivalent
 </li>
 </ul>
</div>

Security Infrastructure Engineer (Fortinet & Zero Trust)

Saronic Technologies

<div><div><h2 class="jobSectionHeader">Location</h2>
Austin, TX
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
Software</div></div>
 <div><div>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above to own the design, implementation, and continuous improvement of security guardrails across our cloud infrastructure. You won't just secure the cloud; you'll build the systems and patterns that enable every team at Saronic to move fast and ship with confidence, with security baked in from the start. You will be the technical authority on how we architect, govern, and defend our AWS environments across commercial and GovCloud.
<h1 class="jobSectionHeader">Key Responsibilities</h1>
<ul><li>Own the security architecture for Saronic's AWS environments, including multi-account strategy, network segmentation, identity architecture, and data protection across commercial AWS and AWS GovCloud
</li><li>Design and maintain secure-by-default Terraform modules and IaC standards that teams adopt as the standard path, enforcing least privilege, secure defaults, and compliance requirements
</li><li>Implement preventive controls (SCPs, permission boundaries, policy-as-code) and detective controls (Config rules, CloudTrail analysis, GuardDuty) as a unified, layered security model
</li><li>Design and enforce IAM patterns across AWS accounts, services, and workloads including least-privilege policies, permission boundaries, cross-account access, federation, and service-to-service authentication
</li><li>Implement and govern secrets management using tools such as AWS Secrets Manager or Vault, integrated into CI/CD and runtime environments
</li><li>Partner with DevOps and Platform Engineering to embed security into CI/CD pipelines, infrastructure provisioning, and deployment workflows
</li><li>Build automated compliance validation into infrastructure pipelines and replace manual security gates with automated guardrails wherever possible
</li><li>Create self-service security tooling and patterns that allow teams to operate with speed and autonomy while maintaining compliance
</li><li>Integrate logging, monitoring, and alerting across cloud infrastructure to validate control effectiveness and detect misconfigurations or threats
</li><li>Build and tune cloud-native detections using CloudTrail, GuardDuty, Config, and SIEM integrations
</li><li>Support incident response for cloud security events, drive root-cause analysis, and translate findings into improved guardrails and controls
</li></ul><h1 class="jobSectionHeader">Required Qualifications:</h1>
<ul><li>6+ years of hands-on experience in cloud security engineering, infrastructure security, DevSecOps, or a closely related security engineering role
</li><li>Expert-level proficiency with Terraform, including module design, state management, policy-as-code, and managing complex multi-environment configurations
</li><li>Deep expertise in AWS security services and architecture, including IAM, Organizations, SCPs, Control Tower, CloudTrail, Config, GuardDuty, Security Hub, KMS, and VPC security
</li><li>Demonstrated experience building security guardrails and reusable infrastructure patterns that engineering teams adopt without friction
</li><li>Strong experience with CI/CD pipeline security, IaC review processes, and automated compliance validation
</li><li>Experience operating in AWS GovCloud or FedRAMP-regulated cloud environments
</li><li>Strong proficiency in Python, Go, Rust, or equivalent languages for building security automation and tooling
</li><li>Ability to obtain and maintain a security clearance
</li></ul><h1 class="jobSectionHeader">Preferred Qualifications:</h1>
<ul><li>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
</li><li>Experience designing multi-account AWS landing zones and organizational security architectures from the ground up
</li><li>Hands-on experience with Kubernetes security, container security, and service mesh security in cloud-native environments
</li><li>Familiarity with NIST SP 800-171, NIST SP 800-53, FedRAMP, or Cloud Computing SRG Impact Levels
</li><li>Experience with infrastructure drift detection, automated remediation, and continuous compliance monitoring
</li><li>Relevant certifications such as AWS Security Specialty, AWS Solutions Architect Professional, HashiCorp Terraform Associate/Engineer, CCSP, or CISSP
</li></ul><h1 class="jobSectionHeader">Benefits:</h1>
<ul><li>Medical Insurance: Comprehensive health insurance plans covering a range of services
</li><li>Saronic pays 100% of the premium for employees and 80% for dependents
</li><li>Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
</li><li>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
</li><li>Time Off: Generous PTO and Holidays
</li><li>Parental Leave: Paid maternity and paternity leave to support new parents
</li><li>Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
</li><li>Retirement Plan: 401(k) plan
</li><li>Stock Options: Equity options to give employees a stake in the company&rsquo;s success
</li><li>Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
</li><li>Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
</li><li>Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office
</li></ul>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</div></div>

Security Engineer, Cloud Security

<div><h3 class="jobSectionHeader">About the job</h3>

The Information Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization's cloud, identity, endpoint, and network environments. This role focuses on engineering secure configurations, building automation, integrating security tooling, and ensuring the ongoing protection of systems and data.

The Information Security Engineer works closely with the IT &amp; InfoSec Helpdesk, Infrastructure teams, and Development teams to architect secure solutions, conduct security assessments, and implement governance frameworks aligned to ISO 27001 and internal InfoSec policies. This role also supports complex incident response activities, assists in root-cause analysis, and ensures controls are implemented following secure-by-design principles.

The shift for this positions is 08.00 - 17.00 CET/CEST with Saturday &amp; Sunday off.
<h3 class="jobSectionHeader">
Responsibilities</h3>

Security Engineering &amp; Control Implementation:
<ul>
<li>Design, implement, and maintain security controls across Azure, Entra ID, Microsoft 365, network, and endpoint environments.</li>
<li>Develop and maintain secure configurations, baselines, and policy frameworks using Azure Policy, Intune compliance, and conditional access.</li>
<li>Integrate and optimize security tools including Microsoft Defender suite, SIEM/SOAR platforms, cloud security posture management, and identity governance systems.</li>
</ul>
Cloud &amp; Infrastructure Security Architecture:
<ul>
<li>Support the design and review of cloud architectures, including secure VNet design, firewalls/NSGs, Private Link, and hybrid connectivity.</li>
<li>Implement key cloud security protections such as encryption, identity governance, privileged access control, and secure automation frameworks.</li>
<li>Partner with Cloud Engineers to codify security controls using Infrastructure-as-Code (IaC).</li>
</ul>
Identity &amp; Acess Security (Entra ID &amp; M365):
<ul>
<li>Implement and manage identity governance: MFA, Conditional Access, PIM, RBAC, role lifecycle automation.</li>
<li>Review, assess, and refine authentication and access control configurations.</li>
<li>Conduct periodic privileged access audits and align identity practices with Zero Trust principles.</li>
</ul>
Security Monitoring &amp; Threat Engineering:
<ul>
<li>Tune and enhance SIEM/Sentinel detections, automation, and response playbooks.</li>
<li>Develop KQL detection queries aligned to threat behaviours and emerging attack patterns.</li>
<li>Improve signal fidelity across Defender platforms and integrate new data sources</li>
</ul>
Incident Response &amp; Digital Forensics Support:
<ul>
<li>Serve as technical escalation during high-severity incidents.</li>
<li>Perform deep-dive investigations into identity compromise, cloud misconfigurations, lateral movement, and high-risk endpoint activity.</li>
<li>Provide forensic artefact analysis support (logs, file metadata, registry data, process analysis).</li>
<li>Implement long-term remediation items and drive post-incident improvements.</li>
</ul>
Vulnerability &amp; Risk Management
<ul>
<li>Support vulnerability assessment programs across cloud, endpoints, and SaaS platforms.</li>
<li><ul><li>Validate remediation efforts with system owners and ensure alignment to risk thresholds.</li></ul></li>
<li><ul><li>Interpret vulnerabilities based on severity, real-world exploitability, and exposure in Microsoft, cloud, and identity stacks.</li></ul></li>
</ul>
Compliance, Governance &amp; ISO 27001 Alignment
<ul>
<li>Implement and maintain controls aligned with ISO 27001:2022 requirements.</li>
<li>Support evidence collection, audit preparation, and remediation of nonconformities.</li>
<li>Maintain accurate documentation including policies, baselines, runbooks, and reference diagrams.</li>
</ul>
Automation, Scripting &amp; Continuous Improvement
<ul>
<li>Build and maintain automation using PowerShell, Azure CLI, Logic Apps, and Functions.</li>
<li>Automate user lifecycle, security state validation, incident containment tasks, and compliance reporting.</li>
<li>Continuously identify opportunities to strengthen security posture through modernization, simplification, and automation.</li>
</ul>
Collaboration &amp; Knowledge Leadership
<ul>
<li>Work closely with Cloud, IT Support, Development, and Compliance teams to embed security into operational and architectural decision-making.</li>
<li>Mentor InfoSec Analysts and provide guidance on investigation techniques, threat identification, and control operation.</li>
<li>Deliver internal training, knowledge-transfer sessions, and documentation.</li>
</ul>
Ticket Resolution &amp; Request Fulfilment
<ul>
<li>Respond to and resolve incidents and requests within the agreed SLAs.</li>
<li>Handle user and complex incidents across Azure, AVD, and M365; drive quick MTTR and reduce ticket reopens via robust post-resolution notes and KB updates.</li>
<li>Fulfil service requests (e.g., resource provisioning, AVD image updates, M365 security baselines, conditional access adjustments).</li>
<li>Problem management: identify recurring issues, perform root-cause analysis, raise Problem records, and propose corrective/preventive actions.</li>
<li>Escalation management: engage vendor support only after thorough triage and data collection (logs, timelines, impacted scope).</li>
</ul><h3 class="jobSectionHeader">About You</h3>

Required Experience
<ul>
<li>4+ years of experience in information security engineering, cloud security, or infrastructure security roles.</li>
<li>Hands-on experience implementing security controls in Azure and Microsoft 365 ecosystems.</li>
<li>Experience with Defender for Endpoint, Defender for Cloud, Defender for Identity, and Sentinel.</li>
<li>Experience with secure cloud networking, identity governance, and Zero Trust principles.</li>
<li>Experience supporting complex incident response investigations.</li>
<li>Familiarity with ITIL processes (incident, change, problem).</li>
<li>Understanding of security frameworks (i.e. ISO 27001:2022) and data privacy regulations (i.e. GDPR).</li>
</ul>
Technical Skills
<ul>
<li>Azure security architecture, governance, and configuration.</li>
<li>Advanced Entra ID identity governance and access control.</li>
<li>Endpoint and cloud threat detection (Defender suite).</li>
<li>SIEM/SOAR engineering (Sentinel, Logic Apps).</li>
<li>PowerShell, automation, and API integration.</li>
<li>KQL, log analysis, and detection engineering.</li>
<li>Infrastructure-as-Code familiarity (Bicep/ARM/Terraform).</li>
<li>Secure network design, segmentation, and encryption practices.</li>
</ul>
Soft skills
<ul>
<li>Customer focused: prioritizing the needs and satisfaction of users and clients in every interaction.</li>
<li>Communication: effective communication skills to collaborate with cross-functional teams, management, and external stakeholders.</li>
<li>Collaborative: working effectively with cross-functional teams to achieve common goals.</li>
<li>Innovative: consistently seeking new ideas and approaches to solve problems and improve processes.</li>
<li>Problem-solving: analytical mindset to identify gaps and recommend solutions.</li>
<li>Adaptability: the infrastructure, security, and client landscape evolve rapidly, so adaptability is crucial.</li>
</ul>
The following qualifications are mandatory:
<ul>
<li>CompTIA Security+ or similar (i.e. ISC2 Certified in Cybersecurity)</li>
<li>SC-300: Identity &amp; Access Administrator</li>
</ul>
The following qualifications would be advantageous:
<ul>
<li>AZ-500: Azure Security Engineer</li>
<li>SC-200: Security Operations Analyst</li>
<li>ISO 27001: 2022 Foundations</li>
</ul><h3 class="jobSectionHeader">We offer</h3>
<ul><li>The flexibility to work 100% remotely with no wasted commute time and travel costs.</li>
<li>A position at a fast-paced international company with ambitious gaming, e-commerce, and tech clients.</li>
<li>A diverse and inclusive culture with people from 80+ countries, speaking 25+ languages - where we celebrate everyone's uniqueness.</li>
<li>Innovative digital tools, and continuous opportunities for learning and development.</li>
<li>Access to Udemy Business for learning and development.</li>
<li>Fun employee engagement activities and participation in 5CA employee-lead communities such as 5CA Connect, Pride, 5CA Gamers, Women of 5CA, to name a few.</li>
<li>Location-specific benefits</li></ul></div>

Information Security Engineer [Remote]

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

Fortinet

<div>Cloud Engineer (Preferred Location: Saudi Arabia)
This individual will be part of the Fortinet Cloud Solutions Architecture team, focusing on the implementation, deployment, and optimization of network and security cloud environments across public cloud platforms.
The Cloud Engineer will work closely with Cloud Solution Architects, customer technical teams, and DevOps teams to translate architecture designs into production-ready deployments , ensuring secure, scalable, and automated cloud environments.
The ideal candidate is highly hands-on, with strong experience in cloud infrastructure deployment, automation, and security implementation , and is passionate about delivering high-quality solutions in complex enterprise environments.
Key Responsibilities:
1) Cloud Implementation &amp; Deployment
<ul><li>Deploy and implement secure cloud landing zones based on approved architectures across AWS, Azure, GCP, OCI and AliCloud
</li><li>Configure and integrate Fortinet security solutions (e.g., FortiGate, FortiManager, FortiAnalyzer, FortiWeb, FortiSandbox) within cloud environments
</li><li>Implement cloud networking components including VPC/VNet design, routing, load balancing, VPN, and hybrid connectivity
</li><li>Execute workload onboarding, migration activities, and environment provisioning
</li><li>Ensure deployments follow security, compliance, and operational best practices
</li></ul>2) Automation &amp; DevOps Engineering
<ul><li>Develop, maintain, and enhance Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or ARM templates
</li><li>Build and manage CI/CD pipelines for automated infrastructure and security deployments
</li><li>Create reusable modules, templates, and scripts to standardize and accelerate delivery
</li><li>Integrate security controls into DevOps workflows (DevSecOps practices)
</li><li>Automate validation, testing, and compliance checks for cloud environments
</li></ul>3) Troubleshooting &amp; Optimization
<ul><li>Troubleshoot and resolve issues across cloud infrastructure, networking, and security components
</li><li>Optimize cloud environments for performance, cost-efficiency, and security posture
</li><li>Implement and integrate monitoring, logging, and alerting solutions
</li></ul>4) Technical Delivery &amp; Collaboration
<ul><li>Collaborate with Cloud Solution Architects to translate HLDs into LLDs and implemented solutions
</li><li>Work closely with customer engineering, DevOps, and security teams during delivery engagements
</li><li>Participate in hands-on workshops, build sessions, and deployment activities
</li><li>Provide detailed as-built documentation, runbooks, and knowledge transfer to customer teams
</li><li>Ensure timely and high-quality delivery of implementation services
</li></ul>Required Skills &amp; Experience:
<ul><li>6&ndash;12 years of experience in roles such as Cloud Engineer, Net-Sec Engineer, or Cloud Consultant (delivery-focused) with a heavy focus on Cloud Networking and Cybersecurity.
</li><li>Strong hands-on experience with at least one major cloud provider: AWS, Azure, or GCP (multi-cloud experience is a plus)
</li><li>Proven experience in cloud infrastructure deployment and configuration , including networking and security
</li><li>Strong expertise in Infrastructure as Code (IaC) tools, preferably Terraform
</li><li>Experience with CI/CD tools such as GitLab CI, GitHub Actions, Jenkins, or similar is a plus
</li><li>Solid scripting skills using Python, Bash, or similar languages
</li><li>Hands-on experience with cloud networking (VPC/VNet, routing, VPN, load balancing, DNS)
</li><li>Understanding of cloud security best practices , including IAM, segmentation, and threat protection
</li><li>Experience deploying and managing network security solutions (Fortinet experience is highly desirable)
</li><li>Familiarity with containers and Kubernetes is a plus
</li><li>Experience with monitoring and logging tools in cloud environments
</li><li>Strong troubleshooting and problem-solving skills
</li></ul>Preferred Qualifications
<ul><li>Cloud certifications (e.g., professional-level networking certifications such as AWS Certified Advanced Networking &ndash; Specialty, Microsoft Certified: Azure Network Engineer Associate, and Google Professional Cloud Network Engineer)
</li><li>Experience with hybrid and multi-cloud environments
</li><li>Prior experience in consulting or professional services delivery
</li><li>Familiarity with DevSecOps practices and security automation
</li></ul>Education:
<ul><li>Bachelor&rsquo;s Degree in Computer Science, Engineering, or related field, or equivalent experience
</li></ul>#LI-NC1</div>

Cloud Engineer

EverFi

<div>Everfi is a leading education technology company founded in 2008 that delivers digital learning solutions focused on real-world skills. The company provides scalable education in areas such as financial literacy, health and wellness, and workplace readiness.
We are seeking a Cloud Architecture Engineer, Senior Principal to support the reliability, scalability, security, and strategic evolution of EVERFI's PaaS systems, while acting as a force multiplier for the broader engineering organization. The Cloud Architecture Engineer, Senior Principal is expected to operate with a high degree of autonomy, make consequential architectural decisions, and represent cloud infrastructure to senior leadership as needed. 
Cloud Architecture Engineer, Senior Principal Compensation and Benefits
$170,000-$185,000 annual base salary depending on experience and education. Everfi may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.
This role is eligible to participate in the Corporate Bonus Plan
100% Remote position
Health, Dental, and Vision insurance
401(K) with matching contribution
Generous Paid Time Off (PTO) 
Cloud Architecture Engineer, Senior Principal Responsibilities
Strategic Architecture &amp; Technical Vision<ul><li>
Shape and execute the multi-year cloud architecture strategy for EVERFI's platform, aligning infrastructure direction with business growth, product roadmap, and organizational scalability goals</li></ul><ul><li>
Lead enterprise-wide architecture reviews and establish cloud governance standards, guardrails, and best practices adopted across all engineering teams</li></ul><ul><li>
Identify and evaluate emerging technologies (e.g., AI/ML infrastructure, FinOps, platform engineering tooling) and make forward-looking recommendations to VP and CTO leadership</li></ul><ul><li>
Serve as a technical decision-maker and escalation point for complex, cross-functional cloud architecture challenges</li></ul><ul><li>
Drive the evolution of EVERFI's platform from reactive infrastructure management to proactive, resilience-first platform engineering</li></ul>
Platform Engineering &amp; Infrastructure<ul><li>
Design, build, maintain, and monitor internal PaaS systems in the cloud at enterprise scale &mdash; with a focus on high availability, fault tolerance, and cost efficiency</li></ul><ul><li>
Lead the implementation of geographically redundant, multi-region, and highly available architectures capable of supporting EVERFI's growth trajectory</li></ul><ul><li>
Architect and oversee the full lifecycle of cloud deployment tooling, ensuring CI/CD systems are continuously optimized for speed, safety, and developer experience</li></ul><ul><li>
Design reliable, interoperable components and utility libraries that underpin EVERFI's applications across engineering teams</li></ul><ul><li>
Architect and own a comprehensive metrics, monitoring, and observability system enabling full-stack visibility, proactive incident response, and SLA enforcement</li></ul>
Security, Compliance &amp; Risk<ul><li>
Ensure all cloud environments are designed and administered in accordance with company security guidelines, SOC 2 compliance requirements, FERPA, and applicable data privacy regulations</li></ul><ul><li>
Architect zero-trust networking, identity and access management (IAM), and data encryption frameworks across EVERFI's cloud environments</li></ul><ul><li>
Partner with Security and Legal teams to lead cloud risk assessments and drive remediation of architectural vulnerabilities at the platform level</li></ul>
Cross-Functional Leadership &amp; Influence<ul><li>
Act as a senior technical advisor to Engineering, Product, and Executive leadership on all cloud infrastructure decisions &mdash; translating complex technical tradeoffs into clear business impact</li></ul><ul><li>
Champion engineering culture: establish and promote best practices for reliability, performance, and operational excellence across all teams consuming cloud infrastructure</li></ul><ul><li>
Build training programs, playbooks, and knowledge resources that upskill engineering teams on cloud operations, architecture patterns, and performance optimization</li></ul><ul><li>
Represent the Cloud Architecture function in cross-functional planning, capacity modeling, and strategic workforce design discussions</li></ul>
Mentorship &amp; Talent Development<ul><li>
Provide mentorship, technical guidance, and career development support to Principal, Staff, and Senior Engineers on the Cloud Architecture team and adjacent teams</li></ul><ul><li>
Participate in hiring, technical interviews, and calibration discussions as needed</li></ul><ul><li>
Participate in an on-call rotation to provide emergency incident support as needed, modeling expected standards of operational excellence for the team</li></ul> 
Cloud Architecture Engineer, Senior Principal Qualifications<ul><li>
Bachelor's Degree in Computer Science, Engineering, or equivalent combination of education and experience required; Master's degree strongly preferred</li></ul><ul><li>
10+ years of progressive professional experience in cloud infrastructure, platform engineering, or systems architecture</li></ul><ul><li>
Minimum 3&ndash;5 years of experience operating at the Principal or Staff Engineer level, with demonstrated ownership of enterprise-wide architectural decisions</li></ul><ul><li>
Proven track record of leading large-scale cloud transformations, platform modernizations, or migrations in high-growth SaaS environments</li></ul><ul><li>
Experience in EdTech, FinTech, or compliance-heavy industries strongly preferred</li></ul>
Certifications (Preferred)<ul><li>
AWS Solutions Architect &ndash; Professional (or equivalent Azure/GCP professional-level certification)</li></ul><ul><li>
AWS Security Specialty or Certified Cloud Security Professional (CCSP)</li></ul><ul><li>
Kubernetes Administrator (CKA) or equivalent</li></ul>
Technical Skills<ul><li>
Cloud Platforms: Deep expertise in AWS (required); hands-on experience with Azure and/or GCP preferred</li></ul><ul><li>
Infrastructure as Code: Terraform, AWS CloudFormation, Pulumi, or CDK at enterprise scale</li></ul><ul><li>
Containerization &amp; Orchestration: Docker, Kubernetes (EKS/AKS/GKE), Kafka</li></ul><ul><li>
CI/CD &amp; DevOps: Advanced pipeline design with Jenkins, GitHub Actions, ArgoCD, or equivalent</li></ul><ul><li>
Networking &amp; Security: TCP/IP, DNS, SMTP, HTTP, VPCs, zero-trust architecture, WAF, distributed networks</li></ul><ul><li>
Programming &amp; Scripting: Python, Go, Ruby on Rails, or Bash (proficiency in at least two)</li></ul><ul><li>
Data &amp; Storage: SQL and NoSQL (Postgres and equivalents); familiarity with data lake and lakehouse architectures</li></ul><ul><li>
Observability: Datadog, New Relic, Prometheus/Grafana, or equivalent full-stack observability platforms</li></ul><ul><li>
AI/ML Infrastructure: Familiarity with cloud-native AI/ML infrastructure (SageMaker, Vertex AI, or equivalent) preferred</li></ul><ul><li>
Open-Source Ecosystem: Extensive experience contributing to and consuming open-source tooling in production environments</li></ul><ul><li>
Web Services &amp; APIs: Expert-level knowledge of REST, RPC, SOA, and API design principles</li></ul></div>

Cloud Architecture Engineer, Senior Principal

Capgemini

<div><div><div><div><div><div><div><h2 class="jobSectionHeader">Job Description</h2>
</div><div><div>seeking a Senior DevOps Engineer to manage our Kubernetes environments and automate secure deployment pipelines.
 
Top Requirements
 
<ul><li>Cloud &amp; K8s: 3&ndash;5 years of experience with Azure (AKS) and Kubernetes administration.
</li><li>CI/CD: Hands-on experience building pipelines in GitLab or Azure DevOps.
</li><li>Automation: Expert in Helm, Docker, and Linux server management.
</li><li>Security: Strong knowledge of DevSecOps and security scanning tools (Sonar).
</li></ul>Key Responsibilities
 
<ul><li>Build and scale infrastructure on Azure.
</li><li>Automate deployments and manage Kubernetes clusters.
</li><li>Integrate security tools into CI/CD pipelines.
</li><li>Provide L3 support and collaborate with development teams.
</li></ul>Tech Stack (Nice to Have)
 
<ul><li>Monitoring: Prometheus, Grafana, EFK.
</li><li>Tools: Nginx, Redis, Keycloak, Jira.
</li><li>Standards: YAML, JSON, and API Management.DevOps Engineer</li></ul></div>
</div></div><div><div><h2 class="jobSectionHeader">Job Description - Grade Specific</h2>
</div><div>Cloud Administrator Involves more responsibilities, such as optimizing cloud infrastructure, troubleshooting issues</div></div></div></div></div></div></div>

Search 10000+ Infrastructure security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 infrastructure security engineer jobs Near Me

Security Infrastructure Engineer (Fortinet & Zero Trust)

Security Engineer, Cloud Security

Information Security Engineer [Remote]

Security Engineer (Bangkok Based, Relocation Support)

Cloud Engineer

Cloud Architecture Engineer, Senior Principal

Cloud Engineer