At a Glance
- Tasks: Lead the design and implementation of secure AWS infrastructure and manage Kubernetes platforms.
- Company: Join a forward-thinking tech company focused on cloud-native security solutions.
- Benefits: Competitive salary, flexible work options, and opportunities for professional growth.
- Other info: Dynamic team environment with a focus on innovation and career advancement.
- Why this job: Make a real impact by ensuring security is at the core of cloud infrastructure.
- Qualifications: 10+ years in Infrastructure Engineering with expertise in AWS, Kubernetes, and Python.
The predicted salary is between 123750 - 151250 $ per year.
We are seeking a Senior Infrastructure Engineer with a deep specialization in Security Design to lead the evolution of our cloud-native ecosystem. In this role, you will be responsible for architecting, building, and maintaining highly available AWS infrastructure while ensuring that security is not an afterthought, but a core component of the design. You will bridge the gap between systems engineering and cyber defense, building resilient platforms that are "secure by design."
Responsibilities
- Infrastructure Security Architecture: Lead the design and implementation of secure AWS infrastructure, ensuring VPC patterns, peering, and transit gateways follow strict security segmentation.
- Kubernetes Platform Engineering: Architect and manage production-grade EKS clusters using Docker and Kubernetes, implementing advanced security controls including OPA/Gatekeeper and workload identity.
- CI/CD Automation: Design and maintain secure automation pipelines using GitHub Actions, ensuring security checks are integrated into the deployment lifecycle.
- Automated Security Infrastructure: Build and maintain central identity and access systems using Keycloak, integrating OIDC/OAuth and LDAP across the enterprise.
- Security as Code: Develop modular, reusable Terraform templates and YAML configurations that incorporate automated compliance checks and security best practices.
- Data & Secret Protection: Manage and secure Postgres DB instances, including encryption strategies and secret management workflows (AWS KMS) to ensure zero-trust data handling.
- Defensive Automation: Develop custom Python-based tooling to automate infrastructure audits, remediation of drift, and security response workflows.
Must-Have Qualifications
- 10+ years in Infrastructure or Systems Engineering with a proven track record of designing secure large-scale environments.
- Expert-level mastery of AWS, Kubernetes, and Docker.
- Mandatory proficiency in Python for infrastructure automation and security tool development.
- Hands-on experience building and managing pipelines with GitHub Actions.
- Expert-level Terraform experience and mastery of YAML for configuration management.
- Practical experience designing and deploying Keycloak and OIDC/OAuth protocols.
- Experience managing and securing Postgres relational databases.
Nice to Have
- Alternative Tools: Experience with Jenkins, Azure DevOps (ADO), or Ruby scripting.
- Shell Scripting: Proficiency in Bash or Shell for system-level maintenance.
- Certifications: AWS Certified Solutions Architect or AWS Certified Security - Specialty.
- Regulatory Knowledge: Experience designing for compliance frameworks such as SOC2, ISO 27001, or NIST.
AWS IT Support Specialist employer: Orion Innovation
Orion Innovation is an exceptional employer that fosters a dynamic and inclusive work culture, offering AI Engineers the chance to work on cutting-edge projects in a hybrid environment in Mississauga, ON. With a strong emphasis on employee growth and development, Orion provides access to innovative tools and resources, ensuring that team members can thrive while contributing to transformative AI solutions across diverse industries. Join us to be part of a collaborative team that values creativity and empowers you to make a meaningful impact.
