Principal Security Engineer, Infrastructure Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Security Engineer, Infrastructure Security based in the United States.

This is a high-impact, senior technical leadership role focused on securing large-scale cloud, platform, and production environments that power critical products. You will define and drive the long-term infrastructure security strategy across cloud, Kubernetes, CI/CD, and developer platforms, ensuring security is embedded by design rather than added as an afterthought. The role combines deep hands-on engineering expertise with architectural leadership across multiple teams and domains. You will work closely with infrastructure, SRE, platform, and product engineering teams to reduce systemic risk and build scalable security controls. A key focus will be enabling secure-by-default engineering practices that support rapid innovation while maintaining strong protection of sensitive systems and data. This is an opportunity to influence organization-wide security posture in a fast-paced, cloud-native environment.

Accountabilities:

• Define and lead the end-to-end infrastructure security strategy across cloud, platform, compute, and deployment environments, ensuring alignment with business priorities and secure-by-default principles.
• Own and evolve security architecture standards across cloud IAM, Kubernetes, container security, network controls, CI/CD pipelines, secrets management, and infrastructure-as-code.
• Design and implement scalable preventative security controls, guardrails, and automation frameworks that reduce systemic risk across engineering teams.
• Lead security architecture reviews for major initiatives and influence technical design decisions across multiple engineering organizations.
• Establish and enforce standards for production access, workload identity, service-to-service trust, and infrastructure hardening practices.
• Drive vulnerability management, incident response improvements, and post-incident learning to reduce recurrence and improve system resilience.
• Partner with engineering teams to improve security for AI-assisted development workflows and emerging GenAI systems interacting with production environments.

Requirements:

This role requires a seasoned infrastructure security leader with deep hands-on engineering expertise and strong architectural judgment. Candidates should bring 8+ years of experience in security, infrastructure, or software engineering, including at least 4+ years focused on cloud or production security in AWS or similar environments. Strong experience across multiple domains such as IAM, Kubernetes security, network security, CI/CD security, or secrets management is essential. You should have strong programming or automation skills in languages such as Python, Go, Java, or Ruby, along with experience building scalable security tooling or platforms. Proven experience leading cross-functional initiatives, driving architecture reviews, and influencing senior stakeholders is required. Familiarity with compliance environments and modern cloud-native security challenges is highly valued, along with the ability to clearly communicate complex technical risk and trade-offs.

• 8+ years in security engineering, infrastructure engineering, or related technical roles
• 4+ years focused on cloud, platform, or infrastructure security
• Strong experience in AWS or comparable cloud environments
• Expertise in IAM, Kubernetes, CI/CD, network security, or secrets management
• Proficiency in at least one programming language (e.g., Python, Go, Java, Ruby)
• Experience leading security architecture reviews and cross-team initiatives
• Strong understanding of building scalable security guardrails and automation
• Excellent communication skills with ability to influence technical and non-technical stakeholders

Benefits:

• Competitive base salary with performance-based incentives
• Equity compensation and long-term wealth-building opportunities
• Comprehensive medical, dental, vision, and mental health coverage
• Remote-first flexibility with periodic in-person collaboration opportunities
• Generous paid time off, parental leave, and company holidays
• 401(k) or retirement savings plans with employer contributions
• Learning and development support for continuous technical growth
• Wellness and productivity stipends to support work-life balance.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?


Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.