Staff Infrastructure Security Engineer (AWS)

Location: Hybrid role based in San Ramon, California or Reno, Nevada, United States

Starting salary: $186,000–$256,000 per year, plus company stock plan and benefits.

Company

hirify.global is a software company headquartered in Lake Tahoe with offices in New York, Reno, the Bay Area, and Dublin, building and supporting cloud-based products.

What you will do

• Drive secure-by-default AWS cloud architecture, threat-model infrastructure designs, and define security requirements that eliminate risk classes before systems are built.
• Identify complex cloud risks missed by tooling, including identity chaining, cross-account lateral movement, control-plane and data-plane separation failures, and supply-chain risks.
• Design AI-augmented detection, posture-management, agent, and automation workflows that find risks at scale and reduce false positives.
• Lead high-impact cloud security incidents as technical lead or incident commander and drive findings through remediation.
• Own or lead cloud security platforms, AWS guardrails, access-management strategies, encryption and key-management controls, runtime protections, and policy-as-code.
• Partner with infrastructure, product, platform, and Staff+ engineering teams to shape architecture, deliver cross-functional projects, and establish responsible AI practices for cloud security.

Requirements

• 8+ years of relevant experience in cloud security or platform engineering, including independently executing complex projects from planning through production and leading initiatives across multiple teams.
• Expert proficiency in at least one programming language; Python is strongly preferred.
• Expert AWS security knowledge covering IAM, AWS Organizations and SCPs, Identity Center, VPC, Security Groups, Transit Gateway, Load Balancers, EKS, S3, Aurora, DynamoDB, CloudTrail, and CloudWatch.
• Expertise across cloud security specialties, including identity, detection, networking, data security, containers, serverless, and governance.
• Experience designing, implementing, and scaling access-management strategies and IAM/SCP policy frameworks.
• Deep understanding of AWS-native workload protection, infrastructure monitoring, threat detection, and risks that automated tooling can miss.
• Fluency with infrastructure-as-code, such as Terraform, and CI/CD practices.
• Experience leading high-impact cloud security incidents and building organizational-scale security platforms, detection pipelines, or posture-management systems that reduce false positives.
• Experience designing AI-augmented security workflows or lightweight agents and automations, with sound judgment regarding responsible AI experimentation and data use.
• Strong written and verbal communication skills, architectural judgment, and the ability to explain tradeoffs, challenge decisions, and influence engineers, product partners, and executives.

Nice to have

• Experience with Go, Kotlin, or TypeScript.

Culture & Benefits

• Security is treated as a shared responsibility and an integral part of the engineering philosophy.
• Opportunities for career advancement and meaningful product impact.
• Unlimited vacation, educational and wellness reimbursements, and $0-cost employee insurance plans.
• Company stock plan, subject to the applicable Stock Option Agreement.
• Equal-opportunity, discrimination-free workplace.