Senior Security Engineer, Infrastructure Security

The application window will be open until at least August 15, 2025 This opportunity will remain online based on business needs which may be before or after the specified date.

The GFiber security engineering team ensures the security of our infrastructure and tools across the company. We partner with engineering, network, application, and cloud development teams to protect our network and systems, which are critical for delivering reliable internet service. As a Security Engineer, you won't just be operating systems - you'll be building our defenses from the ground up, protecting network boundaries, hardening systems, and engineering new solutions to protect our most sensitive data.

Role Description

We are seeking a Senior Security Engineer to architect and build the future of GFiber's security. This is an opportunity to create automated, scalable, and resilient security solutions for our cloud, identity, network, and endpoint infrastructure. You will be a primary builder, using code to solve problems and embedding security into the fabric of our company. This role demands a builder's mindset, deep expertise in at least one core security domain, and broad knowledge across others to collaborate effectively and drive our security posture forward from first principles.

In this role, you'll:

• Design, build, and deploy security controls across our cloud and corporate infrastructure using an infrastructure-as-code approach.
• Automate security processes, alerts, and workflows using Python or Go to scale our capabilities and eliminate manual work.
• Partner with engineering and IT teams in architecture reviews to serve as a security subject matter expert, embedding security into their designs from the start.
• Own the security of your core domain while actively contributing to the overall security of the entire ecosystem.
• Develop and deploy detection and response capabilities to identify and eradicate threats across our environment.

At a minimum we'd like you to have:

• Bachelor's degree in a technical field or equivalent practical experience.
• 7 years of hands-on experience in a security engineering role.
• Experience in one of the following security specializations:
  • Expertise in modern Endpoint Detection and Response (EDR/XDR) platforms, coupled with proven experience in server hardening (e.g., CIS Benchmarks) and driving the full vulnerability management lifecycle.
  • Expertise in architecting and managing modern Identity and Access Management (IAM) solutions, including core services like SSO/MFA, federation (SAML/OIDC), and automated lifecycle management (SCIM).
• Demonstrated proficiency in a scripting language (e.g., Python, Go) for the purpose of automation and building security tools.
• Hands-on experience with Infrastructure as Code (e.g., Terraform, Ansible).

It's preferred if you have:

• Demonstrated, hands-on experience securing production workloads in a public cloud environment
• Experience with network and network security fundamentals (e.g., TCP/IP, DNS, routing, firewall principles).
• Experience with securing common operating systems (Linux, Windows) and the principles of endpoint protection (e.g., EDR, hardening).
• Deep understanding of modern identity protocols and standards (e.g., SAML, OIDC, SCIM).
• Experience thriving in a fast-paced environment where you are responsible for building systems from scratch.
• Ability to articulate complex technical concepts to both technical and non-technical audiences.

The US base salary range for this full-time position is between $157,000 - $230,000 + bonus + cash award + benefits. As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.