Infrastructure Security Engineer (Senior/Principal)

Positron AI is hiring a Senior or Principal Infrastructure Security Engineer to secure its transition from an on-premises engineering environment to a hybrid-cloud model. The role owns identity and access management, developer cloud infrastructure, infrastructure as code, developer tooling, and security detection and response.

Responsibilities:

• Define, implement, and operate our identity platform, including Auth0 and role-based access control (RBAC) across internal systems and cloud environments
• Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities
• Design and manage public key infrastructure (PKI), including certificate issuance, rotation, and revocation
• Lead the migration of on-prem workloads to a secure hybrid-cloud environment on GCP
• Build and maintain cloud infrastructure for developers using infrastructure as code with Terraform and Ansible
• Design and enforce network segmentation between on-prem, cloud, and critical infrastructure environments
• Deploy and maintain artifact storage and other core developer tooling with security built in from the start
• Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely
• Select, deploy, and operate a SIEM solution covering our critical infrastructure
• Build and lead incident response processes, from detection and triage through remediation and post-incident review

Requirements:

• Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar
• Experience with Kubernetes, including managed or proprietary Kubernetes distributions
• Hands-on experience building and managing infrastructure as code with Terraform and Ansible
• Production experience with GCP, or with Azure or AWS and a willingness to work in GCP
• Proven experience deploying, tuning, and operating a SIEM solution
• Experience with PKI, including certificate management and lifecycle automation
• Demonstrated incident response experience, including leading investigations and remediation
• Experience deploying and maintaining artifact storage and secrets management systems
• Understanding of network segmentation and secure network design across on-prem and cloud environments
• This position is open to candidates currently authorized to work in the U.S
• We cannot provide new visa sponsorship for this role but are open to facilitating H-1B visa transfers for eligible candidates
• Broader security engineering experience beyond infrastructure, such as application or product security
• Experience designing security architecture for organizations moving from on-prem to hybrid cloud
• Familiarity with endpoint detection and response (EDR) tooling and deployment