Infrastructure Security Engineer

SpaceXSI is seeking an Infrastructure Security Engineer in Washington, DC (onsite) to design, implement, and maintain secure cloud and hybrid infrastructure. This role centers on protecting cloud-native applications across multi-cloud and hybrid environments with an automation-first mindset, helping strengthen security posture while keeping developer workflows moving.

What you’ll be responsible for

• Design and implement secure cloud architectures across multiple platforms (including AWS, GCP, and Azure)
• Build and secure mission-critical applications in hybrid cloud and on-premises environments
• Create and maintain Infrastructure as Code (IaC) templates that include embedded security controls
• Support regular security assessments and audits for cloud infrastructure and services
• Implement and manage cloud security tools and services such as CSPM, CWPP, and CASB
• Manage identities and roles across cloud and hybrid environments to maintain least privilege
• Monitor and remediate infrastructure to align with regulations and best practices, including PCI, NIST CSF, GDPR, and HIPAA
• Design secure container standards and automation that enable frictionless developer workflows
• Maintain Kubernetes security aligned with current best practices
• Partner with development teams to integrate security best practices into CI/CD pipelines
• Secure and enhance CI/CD pipelines, including integration and maintenance of code scanning platforms
• Monitor and respond to security events and incidents across cloud and hybrid systems
• Maintain SIEM data pipelines to support reliable alerting
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (for example Puppet)
• Develop dashboards and alerts based on security metrics
• Develop and maintain cloud security policies, standards, and procedures
• Own security projects end to end, from identifying issues to implementing solutions
• Stay current on emerging cloud security threats and mitigation strategies

What you’ll bring

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• 3 to 5 years of experience in cloud security, infrastructure security, or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency in at least one cloud platform: AWS, GCP, or Azure, including associated security services
• Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security posture
• Experience with Infrastructure as Code tools such as Terraform and CloudFormation
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Scripting experience for automation and tooling (such as Python and Bash)
• Proactive mindset with strong ownership, critical thinking, and problem-solving skills
• Located in the SF Bay Area or willing to relocate

Compensation and benefits

Compensation: $100,000 - $258,000 USD per year

• Equity
• Comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• Short- and long-term disability insurance
• Life insurance
• Various other discounts and perks

Preferred experience (not required)

• Relevant security certifications such as CCSP, CSSK, or AWS Security Specialty
• Deep expertise in Kubernetes and container security
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of CI/CD best practices and tools
• Familiarity with regulatory compliance requirements including GDPR, HIPAA, PCI DSS, and NIST CSF
• Strong proficiency with Python, Terraform, and configuration management (for example Puppet)
• Hands-on experience building GitHub Actions and workflows
• Experience with observability and security operations tooling (for example Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)
• Experience building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience securing AI/ML workloads in cloud environments
• Experience with banking, money transmission, P2P payments, or similarly regulated financial platforms

Technologies you may work with

• AWS, GCP, Azure
• Infrastructure as Code (IaC), Terraform, CloudFormation
• CSPM, CWPP, CASB
• PCI, NIST CSF, GDPR, HIPAA
• Kubernetes
• CI/CD pipelines, SIEM
• Python, Puppet, Bash
• CloudWatch, Prometheus, Grafana, Wazuh
• GitHub Actions, Karma