Freelance Cloud and Infrastructure Security Engineer

This is a fully remote position, open to applicants in Lithuania, +1 more country.

📋 Description

• Analyze the current infrastructure attack surface

• Detect security vulnerabilities and configuration deficiencies

• Create a prioritized roadmap for remediation

• Evaluate the Azure environment, encompassing AKS with Istio, API Management, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking, and Key Vault

• Examine AWS infrastructure, including ECS, EC2, Lambda, API Gateway, and VPC

• Assess edge security through Cloudflare, Azure Front Door, and Application Gateway, focusing on WAF configurations, TLS, and security headers

• Review the VM landscape, consisting of over 500 SQL Server databases and legacy applications on static VMs

• Analyze infrastructure-as-code and configuration management practices utilizing Terraform, OpenTofu, Ansible, and Chef

• Establish security hardening standards

• Prioritize remediation efforts for cloud and infrastructure engineering teams

• Collaborate with senior security experts responsible for application security evaluations

⛳️ Requirements

• Around 8+ years of experience in cloud or infrastructure engineering, with a solid foundation in security

• Extensive knowledge of Azure security and practical familiarity with AWS

• Hands-on experience with Kubernetes security

• Proficiency in Terraform or OpenTofu

• Practical experience leveraging AI assistants to assess infrastructure code and configurations

• Capability to identify infrastructure security vulnerabilities and translate insights into actionable remediation priorities

• Experience securing Istio service mesh environments (preferred)

• Ability to evaluate Ansible and Chef configurations (preferred)

• Relevant certifications such as AZ-500, AWS Certified Security – Specialty, or CCSP (preferred)

• Familiarity with cloud security posture management tools like Microsoft Defender for Cloud, Wiz, or similar (preferred)

• Previous experience in securing and modernizing legacy infrastructure environments lacking established infrastructure-as-code practices (preferred)

• Proficiency in English with partial alignment to US Eastern time

🏝️ Benefits

• 12-month contract duration

• Opportunity for advancement into application security

• Practical engagement with contemporary AI coding tools

• Learn security practices from seasoned tower leads

• Remote work setup