Principal Infrastructure Security Engineer (Cloud Security)

Location: Dublin, Ireland. Must be permitted to work in Ireland, including under EU work authorization, without employer sponsorship.

Company

hirify.global is a software company headquartered in Lake Tahoe with offices in New York, Reno, the Bay Area, and Dublin.

What you will do

• Own the multi-year cloud security architecture vision and security invariants across all product lines, AWS accounts, and infrastructure.
• Set the strategy for cloud security tooling, automation, AI-enabled security operations, and build-versus-buy decisions.
• Drive AWS guardrails and controls, including SCPs, IAM boundaries, managed security services, custom solutions, and policy-as-code.
• Develop threat models, security approaches, and frameworks for third-party cloud services and internal platforms.
• Build AI and automation frameworks, including reusable agents for cross-functional teams, and deliver large cross-team programs.
• Develop Staff-level engineers, build long-term technical standards and detection frameworks, and advise C-suite and board stakeholders on security investment, cloud adoption, and risk acceptance.

Requirements

• 10+ years of relevant experience in cloud security or platform engineering, including leading large cross-team initiatives with company-wide impact and delivering them on schedule.
• Advanced proficiency in at least one high-level programming language; Python is strongly preferred.
• Expert-level AWS experience across IAM, Organizations and SCPs, Identity Center, VPC, Security Groups, Transit Gateway, Load Balancers, Network Firewall, EKS, ECS, Lambda, S3, Aurora, DynamoDB, GuardDuty, CloudTrail, and CloudWatch.
• Demonstrated success defining enterprise-wide access management strategies, IAM/SCP policy frameworks, and cloud security architecture adopted by engineering teams.
• Deep understanding of cloud workload protection, infrastructure monitoring, and threat detection in AWS-native environments.
• Expert-level experience securing Kubernetes and Amazon EKS, including EKS Auto Mode, cluster access control, network policy, Istio, Kyverno, and cosign image signing.
• Fluency with infrastructure-as-code, GitOps delivery, and CI/CD practices, plus experience setting tooling and automation strategy.
• Ability to present cloud security risks and trade-offs to executives and influence investment, cloud adoption, and risk acceptance decisions.
• Experience anticipating changes in cloud security, building AI or automation frameworks and reusable agents, developing senior engineers, sponsoring emerging leaders, and establishing durable team standards and architectural judgment.

Nice to have

• Kotlin or TypeScript experience.

Culture & Benefits

• Security is treated as everyone's responsibility and part of the engineering philosophy.
• Culture emphasizes ownership, transparency, positive intent, action-oriented problem solving, resilience, and collaboration.
• hirify.global is a discrimination-free equal opportunity workplace.