Infrastructure Security Engineer (Senior/Principal)

Role Overview

As Positron scales, our engineering environment is evolving from a primarily on-prem footprint to a hybrid-cloud model. We are looking for a Senior or Principal Infrastructure Security Engineer to secure and manage that transition. You will own identity and access management, cloud infrastructure for our developers, infrastructure as code, and the core developer tooling our hardware and software teams depend on every day.

This is a hands-on, high-ownership role where you will define the foundations: how engineers authenticate, how infrastructure is provisioned and segmented, how secrets and artifacts are stored, and how we detect and respond to threats against our most critical systems.

Key Responsibilities

Identity and Access Management

• Define, implement, and operate our identity platform, including Auth0 and role-based access control (RBAC) across internal systems and cloud environments.
• Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities.
• Design and manage public key infrastructure (PKI), including certificate issuance, rotation, and revocation.

Hybrid Cloud Infrastructure

• Lead the migration of on-prem workloads to a secure hybrid-cloud environment on GCP.
• Build and maintain cloud infrastructure for developers using infrastructure as code with Terraform and Ansible.
• Design and enforce network segmentation between on-prem, cloud, and critical infrastructure environments.

Developer Tooling and Platform Security

• Deploy and maintain artifact storage and other core developer tooling with security built in from the start.
• Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely.

Detection and Response

• Select, deploy, and operate a SIEM solution covering our critical infrastructure.
• Build and lead incident response processes, from detection and triage through remediation and post-incident review.

Required Qualifications

• Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar.
• Experience with Kubernetes, including managed or proprietary Kubernetes distributions.
• Hands-on experience building and managing infrastructure as code with Terraform and Ansible.
• Production experience with GCP, or with Azure or AWS and a willingness to work in GCP.
• Proven experience deploying, tuning, and operating a SIEM solution.
• Experience with PKI, including certificate management and lifecycle automation.
• Demonstrated incident response experience, including leading investigations and remediation.
• Experience deploying and maintaining artifact storage and secrets management systems.
• Understanding of network segmentation and secure network design across on-prem and cloud environments.

Preferred Qualifications

• Broader security engineering experience beyond infrastructure, such as application or product security.
• Experience designing security architecture for organizations moving from on-prem to hybrid cloud.
• Familiarity with endpoint detection and response (EDR) tooling and deployment.

Leveling and Scope

While this role is currently posted at a specific level, we are a growth-oriented organization and are open to hiring at a more senior level for the right candidate. Please note that this job description serves as a focused but generalized overview of the role; specific responsibilities and impact expectations will be tailored to the experience and seniority of the final hire.

What Success Looks Like

In your first three to six months, you will have defined and stood up our identity foundation, with Auth0 and RBAC in place across key systems. Developers will be provisioning cloud infrastructure through infrastructure as code, and the migration from on-prem to hybrid cloud will be well underway on a secure, segmented footing. A SIEM solution will be live and monitoring our critical infrastructure, giving the team real visibility and a clear path to detect and respond to threats.

Compensation & Benefits

• The base salary range for this role is Senior: $170,000 - $250,000, Principal: $250,000 - $325,000.
• Please note that the figures provided represent the base salary range only and do not include other elements of our total compensation package, equity, or comprehensive benefits.

At Positron AI, we value the unique expertise each candidate brings. While the range above reflects our typical expectation for the position, we reserve the flexibility to exceed this range for candidates whose specialized skills, significant experience, or unique qualifications fall outside the standard scope of the role. Final offers are determined based on a variety of factors, including internal equity, and individual impact.

Benefits & Perks

We want you to do your best work and feel confident that you and your family are taken care of. That means comprehensive coverage, real time to rest, and support for your future.

Health and wellness

• Fully company-paid medical, dental, and vision insurance for you and your dependents
• Company-paid life and disability coverage, with voluntary options to add more
• Supplemental hospital, critical illness, and accident coverage available

Time off and flexibility

• Unlimited paid time off; we encourage everyone to truly unplug and recharge
• 13 paid company holidays
• Remote-first culture with a company-provided computer and home office setup

Compensation and future

• Competitive salary and equity
• 401(k) with company matching, eligible from day one

Visa Support

This position is open to candidates currently authorized to work in the U.S. We cannot provide new visa sponsorship for this role but are open to facilitating H-1B visa transfers for eligible candidates.