Senior Infrastructure & Security Engineer – Platforms

Koltin

. Own the security of the cloud foundation, including identity and least privilege, audit logging, encryption and network boundaries .

Posted 11/9/2026full-timeMexico City • MexicoSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security management, focusing on identity and least privilege access, audit logging, and incident response. Proficient in automating security controls and enhancing security capabilities within engineering teams.

Highest-signal resume keywords

Cloud Security ManagementInfrastructure As CodeIncident Response LeadershipIdentity And Least-Privilege Access DesignAudit Logging And Detection

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

KubernetesPythonGoBashLinux FundamentalsNetworking FundamentalsDNS FundamentalsSecurity Controls AutomationCI/CDSecurity As Code

Soft Skills

Risk CommunicationCollaborationProblem-SolvingMentoring

Tools & Technologies

AWSTerraformGitOpsSingle Sign-OnSAMLOIDCMDM

Certifications & Qualifications

ISO 27001SOC 2PCI Compliance

Industry Keywords

FintechInsuranceHealth

Tech Stack

Tools & technologies

AWSCloudDNSKubernetesLinuxPythonTerraformGo

About the role

Key responsibilities & impact

Own the security of the cloud foundation, including identity and least privilege, audit logging, encryption and network boundaries
Follow security findings through to resolution
Manage how people and workloads access systems using single sign-on, short-lived credentials and role-based access
Secure infrastructure as code and delivery pipelines with guardrails and automated checks
Lead incident response through runbooks, detection and post-incident reviews
Convert audit, penetration-test and partner requirements into automated controls and evidence
Partner with IT to apply security-as-code to corporate identity, devices and endpoints
Own the platform's end-to-end security posture and prioritize and close key risks
Make secure building and deployment the default path
Turn incidents, findings and audit requests into lasting improvements
Scope security work into phases and deliverables while balancing risk, cost and delivery speed
Raise engineers' security capabilities through reviews, documentation and pairing

Requirements

What you’ll need

Experience running production infrastructure on a major cloud provider with infrastructure as code for approximately five years
Experience designing identity and least-privilege access in production
Experience with audit logging, detection and incident response, including at least one security incident helped handle
Experience with Kubernetes or a comparable container platform in production, with CI/CD
Linux, networking and DNS fundamentals
Scripting and tooling in Python, Go or Bash
Fluent Spanish and good working English
Ability to treat security as engineering by designing controls, proving they work and automating them
Experience working through reviewed pull requests rather than console changes
Ability to explain risk in plain terms and help engineers ship safely
Experience leading debugging of difficult production issues
Bonus: experience owning controls in an ISO 27001, SOC 2 or PCI compliance audit
Bonus: experience in fintech, insurance or health
Bonus: experience with identity and device management, including SSO, SAML/OIDC and MDM
AWS, Terraform, Kubernetes and GitOps knowledge is a bonus, not a requirement

Benefits

Comp & perks

Health memberships with personalized, preventive care
Major medical insurance coverage for older adults, backed by BBVA Seguros Salud
Mix of remote work and time at the CDMX office