Senior Information Security Infrastructure Engineer – Security Architecture – InfoSec

Responsibilities

We are representing a confidential enterprise software organization seeking a Senior Information Security Infrastructure Engineer to join their Security Architecture team. In this remote role, you will own the security telemetry pipeline end-to-end, ensuring critical security data flows reliably into their search platform.

Your key responsibilities will include:

• Security telemetry ingestion: Build and maintain ingestion of security-relevant data including cloud provider audit logs, identity and SaaS activity, endpoint and asset data. Integrate with third-party and cloud provider APIs, handling authentication, pagination, rate limits, and schema changes.
• Cluster operations: Keep search infrastructure healthy through monitoring, regular upgrades, capacity management, shard optimization, index lifecycle management (ILM), and cross-cluster search (CCS) enablement.
• Infrastructure as code: Use Terraform to manage cloud infrastructure and search platform resources including pipelines, index templates, and alerts. Deploy scheduled ingest jobs using Kubernetes and Helm.
• Automation and tooling: Leverage AI automation to reduce operational toil through self-healing jobs, health checks, alerting, internal CLIs, and AI-assisted workflows for investigation and operations.
• Data quality and reliability: Own data flow verification, monitor backfills, ensure schema and field consistency, and manage cost optimization.

What We're Looking For

Required qualifications:

• Production experience operating search infrastructure including ingest pipelines, index templates, mappings, and queries while ensuring cluster health and upgrades. Experience with search platforms on Kubernetes (ECK or similar) is strongly preferred.
• Proven track record using AI to accelerate development, debug complex systems, and enhance operations while maintaining ownership of final outcomes.
• Kubernetes proficiency: deploying and operating workloads (scheduled jobs, Helm charts, operators) and troubleshooting pods/jobs in a cluster.
• Terraform experience managing cloud and search platform resources as code.
• API integration skills: consuming REST APIs for data ingestion including authentication, pagination, rate limiting, concurrency, and error handling.
• Python scripting ability to read, write, and modify ingestion and automation scripts (scripting-level proficiency required).
• Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

Bonus qualifications:

• Experience with cloud providers, preferably GCP, and working with audit and logging data.
• Knowledge of GitHub, PR-based workflows, GitHub Actions, and CI/CD.
• Understanding of SOC operations and incident response workflows, including use of security telemetry during investigations.
• Ability to develop and use dashboard/visualization tools.

How We Work With You

Our talent team at Get A Job.ai will guide you through the entire process. Interested candidates apply directly through our platform at getajob.ai. One of our recruiters will screen your application and qualifications. If you're a strong match, we will submit your profile to our client for consideration. Please do not attempt to contact the client directly—all communications flow through Get A Job.ai to ensure a professional and organized hiring process.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Opportunity: Get A Job.ai is committed to inclusive recruiting practices. We welcome applicants from all backgrounds and provide equal opportunity regardless of race, color, religion, sex, national origin, age, disability, or any other protected status.