Logo
Motion Recruitment

Senior Infrastructure Security Engineer

Motion Recruitment, New York, New York, us, 10261

Save Job

Join to apply for the

Senior Infrastructure Security Engineer

role at

Motion Recruitment .

One of our clients is seeking an experienced Infrastructure Security Engineer to design, implement, and maintain the security of their cloud and on‑premises infrastructure. You will safeguard their systems, networks, and services by applying security best practices, building automation to enforce policies, and partnering closely with infrastructure and application teams to proactively identify and mitigate risks.

This role is ideal for someone who thrives at the intersection of security and infrastructure engineering—comfortable working hands‑on with cloud services, Kubernetes, and automation tooling while also driving security strategy and compliance.

Responsibilities

Security Architecture & Hardening

Design, implement, and maintain secure infrastructure across cloud (AWS, GCP, or Azure) and on‑prem environments.

Harden Kubernetes clusters, container runtimes, Linux/Windows hosts, and network configurations.

Build and maintain infrastructure‑as‑code (Terraform, Pulumi, CloudFormation) with security guardrails.

Monitoring & Detection

Deploy and manage security monitoring tools (SIEM, IDS/IPS, endpoint protection, vulnerability scanners).

Develop automated detection and alerting for anomalous activities in infrastructure and network layers.

Identity & Access Management

Implement and enforce least‑privilege access policies across infrastructure, including IAM, secrets management, and certificate lifecycles.

Support SSO, MFA, and role‑based access across cloud and internal systems.

Incident Response & Threat Mitigation

Collaborate with security and ops teams to investigate and remediate security incidents.

Conduct post‑mortems and implement lessons learned into infrastructure tooling and processes.

Collaboration & Enablement

Partner with DevOps, Platform, and Engineering teams to integrate security into CI/CD pipelines.

Build automation and self‑service tooling that enables developers to adopt secure patterns without friction.

Contribute to security training and best‑practice documentation for engineers.

Required Qualifications

3–5+ years of experience in infrastructure, DevOps, or security engineering.

Strong knowledge of cloud platforms (AWS, GCP, or Azure).

Experience with Kubernetes, container security, and infrastructure‑as‑code (Terraform preferred).

Proficiency in securing Linux/Windows systems and core networking protocols.

Hands‑on experience with vulnerability management, intrusion detection, and log analysis.

Proficiency in scripting or programming languages (Python, Go, or Bash).

Preferred Qualifications

Familiarity with zero‑trust architecture and secure network design.

Experience implementing compliance frameworks (SOC 2, ISO 27001, FedRAMP, HIPAA, etc.).

Contributions to open‑source security or DevSecOps tooling.

Knowledge of modern CI/CD pipelines and integrating security controls into them.

#J-18808-Ljbffr