Infrastructure Security Manager

atChainlink LabsRemote

United States Full-time Cybersecurity / Security EngineerMid-levelSenior$90k – $200k/year

Posted 5 days ago

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and enhance the security frameworks that safeguard Chainlink's infrastructure, cloud environments, and decentralized network.

• Create and standardize secure infrastructure models across AWS and GCP, forming a scalable security base for future expansion.

• Implement unified identity and access management along with centralized secrets management to significantly mitigate infrastructure risks.

• Provide secure Terraform and GitOps workflows that equip engineering teams with a safe "paved road" for infrastructure deployments.

• Automate compliance, logging, and security controls to support SOC 2 Type 2 and banking-grade operational standards.

• Minimize the impact of infrastructure breaches by enhancing IAM, platform hardening, and cloud security perimeters across distributed systems.

• Drive the advancement of Infrastructure Security into an engineering-enabled capability that speeds up product delivery while bolstering the organization's security posture.

⛳️ Requirements

• Proven recent, hands-on experience in creating and deploying production-grade Terraform for cloud security, including intricate IAM, EKS, and VPC implementations via GitOps pipelines such as Atlantis or ArgoCD.

• Demonstrated success in leading and mentoring a small engineering team while maintaining direct responsibility for technical project delivery in a player-coach role.

• Established foundational infrastructure hardening and IAM standards from scratch in an organization lacking a defined infrastructure security function.

• Experience in designing and implementing secure infrastructure using Infrastructure as Code and GitOps methodologies in production cloud environments.

• Proven capability to architect and secure cloud infrastructure while closely collaborating with engineering teams to integrate security into development workflows rather than serving as a deployment gatekeeper.