Senior Infrastructure Security Engineer

Accountabilities:: Support incident management and resolution activities, helping coordinate responses, investigate security incidents, and implement effective remediation measures. Lead the continuous improvement of incident management procedures, ensuring that established processes are documented, followed consistently, and regularly reviewed. Strengthen the Secure Software Development Lifecycle (SSDLC) by implementing security improvements across software development processes, vulnerability detection, and remediation workflows. Oversee vulnerability scanning and remediation activities, ensuring identified security issues are prioritized and addressed within established timelines. Develop security documentation, educational resources, and awareness materials to help engineering teams adopt secure development practices. Streamline the handling of customer security questionnaires by developing tools, automations, and systems that improve response efficiency and accuracy. Assess potential business continuity risks and develop comprehensive disaster recovery and business continuity plans. Coordinate recurring disaster recovery exercises and validate the effectiveness of established recovery procedures. Collaborate with cross-functional engineering teams to provide infrastructure support for new features, services, and platform capabilities. Improve and automate infrastructure management and deployment workflows using tools such as Terraform, Argo, and GitHub Actions. Manage, maintain, and optimize Google Cloud Platform (GCP) infrastructure and Kubernetes (GKE) environments, ensuring scalability, availability, performance, and reliability. Enhance the organization's observability capabilities by maintaining and improving monitoring systems using Sentry, Prometheus, Grafana, and Alertmanager. Implement and maintain performance monitoring solutions, including k6 and similar tools, to identify bottlenecks, monitor system health, and support capacity planning. Establish proactive monitoring and alerting mechanisms to detect operational issues early and minimize service disruptions. Collaborate with backend engineering teams to support reliable microservices architectures, asynchronous processing, and event-driven infrastructure. Contribute to compliance and security initiatives, supporting the implementation and maintenance of industry-recognized standards and certifications. Identify opportunities to improve internal engineering efficiency, infrastructure reliability, security maturity, and operational processes. Requirements: At least 5 years of hands-on experience managing cloud infrastructure, infrastructure automation, and production environments. Demonstrated experience supporting or achieving security and compliance certifications such as SOC 2 Type II, ISO 27001, or equivalent frameworks. At least 3 years of practical experience working with cloud providers, preferably Google Cloud Platform (GCP). At least 3 years of experience deploying, managing, and maintaining Kubernetes clusters in production environments. Strong understanding of cloud-native infrastructure, containerization, infrastructure-as-code principles, and automated deployment practices. Practical experience with infrastructure automation and orchestration tools such as Terraform, Argo, and GitHub Actions. Experience with Node.js or Python for backend services, particularly within microservices-based architectures. Familiarity with asynchronous processing, message queues, and event-driven architectures, including technologies such as Kafka and Google Pub/Sub. Knowledge of security engineering principles, including vulnerability management, secure software development practices, incident response, and remediation processes. Understanding of business continuity planning, disaster recovery strategies, operational resilience, and security risk management. Experience implementing observability and monitoring solutions using tools such as Sentry, Prometheus, Grafana, and Alertmanager. Familiarity with performance testing and monitoring tools, including k6 or equivalent solutions. Strong analytical and troubleshooting skills, with the ability to investigate complex infrastructure and security issues and develop effective solutions. Excellent collaboration and communication skills, with the ability to work across engineering teams and support internal stakeholders. A proactive, ownership-driven mindset, with a strong focus on improving internal engineering productivity, operational efficiency, and technical reliability. Ability to adapt to a fast-paced, evolving technology environment and continuously learn emerging cloud, infrastructure, and security technologies. Benefits: Competitive compensation: Annual salary ranging from US$170,000 to US$210,000, with final offers determined by experience, expertise, and geographic location. Canadian compensation should be confirmed with the hiring team. Equity participation: Stock options, providing an opportunity to participate in the organization's long-term growth. Comprehensive benefits package: Access to employee benefits and additional perks. Remote working environment: Opportunity to work remotely while collaborating with a distributed engineering team. Professional growth: Work with advanced AI technologies and modern cloud-native infrastructure while developing expertise in security engineering and platform reliability. Technical ownership: Significant opportunities to lead infrastructure and security initiatives and influence engineering standards and practices. Innovative culture: Join a fast-growing organization that values experimentation, first-principles thinking, continuous learning, and practical problem-solving. Collaborative environment: Work alongside talented engineering professionals who value transparency, teamwork, adaptability, and shared success. Meaningful impact: Help build secure, scalable, and resilient infrastructure supporting the transformation of the insurance industry through AI.