Lead Security and Infrastructure Engineer

This is a fully remote position, open to applicants in Florida.

📋 Description

• Take charge of the security framework across cloud, application, and on-chain systems.

• Lead the response to security incidents, encompassing detection, containment, forensics, remediation, and conducting blameless post-mortems.

• Develop security tools, runbooks, and processes to enhance incident response.

• Set secure defaults for secrets management, IAM, network segmentation, audit logging, and production access.

• Manage access governance, implement least-privilege policies, and ensure separation of duties.

• Perform threat modeling, vulnerability management, and regular security assessments.

• Create detection and alerting mechanisms for unusual traffic, abuse, and scanning across Cloud Run, load balancers, and Cloudflare.

• Assist with SOC 2 and other compliance and audit-readiness efforts.

• Oversee infrastructure operations that support production releases.

• Develop and refine CI/CD pipelines for secure and consistent Cloud Run deployments.

• Manage release hygiene, rollouts, rollbacks, deployment controls, and operational readiness.

• Provide hands-on operational support, maintenance, upgrades, troubleshooting, and reduction of toil.

• Build and sustain infrastructure-as-code and GCP deployment automation.

• Strengthen configurations for Cloud Run, BigQuery, MySQL, and Cloudflare.

• Enhance logging, metrics, tracing, monitoring, and alerting practices.

• Implement reliability practices concerning capacity, backups, availability, and on-call operations.

• Manage disaster recovery capabilities, including RTO/RPO targets, backups, point-in-time recovery, failover procedures, and DR runbooks.

• Conduct restoration drills and game days.

• Secure Ethereum and EVM integrations, wallets, key management, transaction signing, and smart contract interactions.

• Review on-chain settlement processes and create safeguards against crypto-specific failure modes.

• Collaborate with product and engineering teams on payment and blockchain functionalities.

⛳️ Requirements

• 8+ years of experience in DevOps, infrastructure, SRE, or a closely related discipline, with substantial hands-on security engineering responsibilities.

• Senior or lead-level expertise in establishing security and infrastructure direction.

• Extensive hands-on experience with Google Cloud Platform, including Cloud Run, IAM, networking, BigQuery, logging, monitoring, Security Command Center, and cloud security operations.

• Strong understanding of security fundamentals in IAM, least privilege, secrets and key management, network security, incident response, and vulnerability management.

• Experience in production environments with Ethereum or EVM-based systems, including wallets, key management, transaction signing, and smart contract interactions.

• Proficient in Cloudflare, including WAF, DNS, rate limiting, edge security, and Pages.

• Familiarity with Node.js and TypeScript application environments.

• Production experience with MySQL.

• Strong skills in infrastructure-as-code and CI/CD practices.

• Proven experience in responding to production incidents.

• Exceptional written and verbal communication skills in English, at a C1-C2 level.

• Must be authorized to work in the United States and currently reside in the United States.

🏝️ Benefits

• Meaningful equity participation.

• Unlimited PTO.

• Flexible work schedule focused on outcomes.

• 401(k) with a 3% company contribution.

• Fully remote work model.