Platform/InfoSec Engineer
About the Position
We are seeking a highly skilled Platform/InfoSec Engineer based in India to support our global operations during US Eastern Time (ET) hours. This role serves as a bridge between infrastructure stability and proactive security, focusing on vulnerability remediation, automated patch management, and secure CI/CD integration. The successful candidate will be a "no-click-ops" advocate who prioritizes automation over manual documentation. This position is based in India and requires full time availability during US Eastern Time hours.
About the Project
The project involves the management and security of a high-scale cloud platform. The goal is to modernize infrastructure through strict Infrastructure as Code (IaC) practices, ensuring the environment remains secure, compliant, and highly automated against evolving security threats.
Responsibilities
- Implement and manage vulnerability scanning, secret rotation, and credential management protocols.
- Enforce IAM least-privilege policies and ensure continuous compliance across cloud environments.
- Integrate container and dependency scanning into the automated build and deployment pipelines.
- Lead vulnerability remediation for both Linux and Windows systems, including app-level fixes, library updates, and certificate renewals.
- Monitor and remediate end-of-life (EOL) software and maintain strict server compliance standards.
- Manage patching schedules and lead change management processes, including the coordination of downtime windows across global teams.
- Drive the automation of repetitive operational tasks (toil) to improve system reliability.
- Administer Jenkins environments, focusing on role-based access control (RBAC), credential management, and plugin stability.
Requirements
- Deep proficiency in core services, including EC2, S3, Lambda, CloudFormation, ECS, VPC, and IAM.
- A strict commitment to IaC; experience operating in environments with no manual "click-ops."
- Proven experience in automated patch management and vulnerability remediation across diverse OS environments.
- Strong experience with Jenkins, specifically regarding security configurations and access management.
- A proactive automation-first approach to infrastructure and security operations.
Nice to Have
- Experience with incident response and emergency troubleshooting.
- Knowledge of AWS cost optimization, tagging strategies, and multi-account guardrails.
- Proficiency in Python or Bash scripting.
- Familiarity with GitOps-driven workflows and declarative Jenkins pipelines.
- Hands-on experience with Wiz, HashiCorp Vault, CyberArk, or ServiceNow.
- Experience with Docker containerization within pipeline workflows.
