Staff Infrastructure Security Engineer

. Incorporate secure design principles into cloud architecture .

Posted 10/23/2026full-timeUnited StatesLead💰 $231,000 - $340,000 per yearWebsite

Tools & technologies

AWSAzureCloudKubernetes

Key responsibilities & impact

Incorporate secure design principles into cloud architecture
Establish reusable security patterns, standards, and guardrails for secure-by-default development
Develop isolation mechanisms such as sandboxing with product engineering
Review security-critical configuration changes
Act as Codeowner for security-critical infrastructure-as-code cloud configurations
Manage risks and vulnerabilities in the cloud environment
Translate security requirements into concrete engineering investments
Define infrastructure security architecture and multi-quarter roadmaps
Mentor and develop security engineers
Set technical direction for secure-by-default infrastructure security across Harvey’s platform
Design and implement least privilege, component isolation, attack-surface management, and tenant isolation for a multi-tenant SaaS platform
Create frameworks and repeatable patterns enabling research and engineering teams to move quickly without sacrificing security
Partner with Engineering and Product teams

What you’ll need

8+ years of experience in Security Engineering and/or Software Engineering
Experience writing high-quality software
Experience building production-grade infrastructure
Experience raising the security bar across engineering teams
Strong fundamentals in networking, operating systems, and cryptographic protocols
In-depth knowledge of Kubernetes, common misconfigurations, and privilege escalation vectors
Ability to find weaknesses in real-world cloud environments
Experience applying security best practices in AWS, Azure, or Google Cloud
Track record of driving cross-functional security initiatives and influencing engineering decisions across teams
Experience setting security standards and best practices at organizational scale
Familiarity with large-scale Infrastructure as Code deployments
Familiarity with Kubernetes Admission Controllers and policy enforcement
Exposure to multi-cloud environments

Comp & perks