SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 170,000 - 250,000 / annual
Positron AI is building next-generation AI inference accelerators designed for low-latency, high-throughput large language model inference. The company recently raised $875 million at a $5 billion valuation (September 2026) and is scaling from a primarily on-premises footprint to a hybrid-cloud model.
As Infrastructure Security Engineer, you will own the security foundations for this transition. This is a hands-on, high-ownership role where you define how engineers authenticate, how infrastructure is provisioned and segmented, how secrets and artifacts are stored, and how the company detects and responds to threats against critical systems.
**Key Responsibilities:**
Identity and Access Management: Define, implement, and operate the identity platform including Auth0 and role-based access control (RBAC) across internal systems and cloud environments. Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities. Design and manage public key infrastructure (PKI), including certificate issuance, rotation, and revocation.
Hybrid Cloud Infrastructure: Lead the migration of on-premises workloads to a secure hybrid-cloud environment on GCP. Build and maintain cloud infrastructure for developers using infrastructure as code with Terraform and Ansible. Design and enforce network segmentation between on-prem, cloud, and critical infrastructure environments.
Developer Tooling and Platform Security: Deploy and maintain artifact storage and other core developer tooling with security built in from the start. Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely.
Detection and Response: Select, deploy, and operate a SIEM solution covering critical infrastructure. Build and lead incident response processes, from detection and triage through remediation and post-incident review.
**Requirements:**
- Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar
- Experience with Kubernetes, including managed or proprietary Kubernetes distributions
- Hands-on experience building and managing infrastructure as code with Terraform and Ansible
- Production experience with GCP, or with Azure or AWS and a willingness to work in GCP
- Proven experience deploying, tuning, and operating a SIEM solution
- Experience with PKI, including certificate management and lifecycle automation
- Demonstrated incident response experience, including leading investigations and remediation
- Experience deploying and maintaining artifact storage and secrets management systems
- Understanding of network segmentation and secure network design across on-prem and cloud environments
**Preferred Qualifications:**
- Broader security engineering experience beyond infrastructure, such as application or product security
- Experience designing security architecture for organizations moving from on-prem to hybrid cloud
- Familiarity with endpoint detection and response (EDR) tooling and deployment
