What are the responsibilities and job description for the Infrastructure as Code (IaC) Security Engineer position at OrangePeople?
We are looking for an experienced Infrastructure as Code (IaC) Security Engineer to lead the design, automation, and security of cloud infrastructure supporting modern AI platforms. The successful candidate will build resilient, scalable, and secure infrastructure using Infrastructure as Code while ensuring security is embedded throughout the software delivery lifecycle. This role partners closely with Platform Engineering, DevSecOps, and AI engineering teams to establish secure deployment standards across Kubernetes-based environments.
Key Responsibilities:
- Develop, maintain, and enhance Infrastructure as Code solutions for cloud-native and containerized environments.
- Administer and optimize Amazon EKS clusters, including networking, RBAC, node management, workload isolation, and security policies.
- Create reusable Terraform modules that enforce secure infrastructure standards such as least-privilege access, encryption, and network segmentation.
- Build, maintain, and secure Docker images and Helm charts following container hardening best practices.
- Embed automated security validation into CI/CD pipelines using infrastructure policy and compliance tools.
- Automate provisioning, configuration management, scaling, and lifecycle management while minimizing configuration drift.
- Partner with AI Security, Platform Engineering, and DevSecOps teams to support secure application deployment, threat mitigation, and operational resilience.
- Investigate and resolve infrastructure issues across Kubernetes, Terraform, containers, and deployment pipelines.
- Ensure infrastructure aligns with internal governance requirements and industry security frameworks.
- Prepare technical documentation, deployment standards, and operational runbooks for engineering teams.
Required Qualifications:
- Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience.
- Strong experience implementing Infrastructure as Code within AWS or similar cloud environments.
- Hands-on expertise administering Kubernetes, particularly Amazon EKS.
- Advanced Terraform experience, including reusable module development and infrastructure automation.
- Practical experience with Docker, Helm, and container lifecycle management.
- Experience integrating infrastructure deployments into CI/CD pipelines.
- Solid understanding of IAM, encryption, secrets management, network security, and cloud security principles.
- Ability to troubleshoot complex infrastructure and deployment issues.
- Strong collaboration and communication skills in cross-functional engineering environments.
Preferred Qualifications:
- Experience supporting AI, machine learning, or security-focused platforms.
- Knowledge of AWS cloud-native services and modern infrastructure automation practices.
- Experience with policy enforcement and infrastructure validation tools such as OPA/Gatekeeper, Checkov, tfsec, or equivalent.
- Familiarity with NIST, CIS Benchmarks, and infrastructure governance standards.
- Experience with GitOps, observability platforms, and site reliability engineering concepts.
- Track record of building standardized Terraform modules and Kubernetes deployment frameworks at enterprise scale.
Benefits:
- 401(k).
- Dental Insurance.
- Health insurance.
- Vision insurance.
- We are an equal-opportunity employer and value diversity, equality, inclusion, and respect for people.
- The salary will be determined based on several factors, including, but not limited to, location, relevant education, qualifications, experience, technical skills, and business needs.
Additional Responsibilities:
- Participate in OP monthly team meetings and participate in team-building efforts.
- Contribute to OP technical discussions, peer reviews, etc.
- Contribute content and collaborate via the OP-Wiki/Knowledge Base.
- Provide status reports to OP Account Management as requested.
About us:
At OP, we help you harness the power of technology for maximum impact. A technology consulting and solutions company, we offer advisory and managed services, innovative platforms, and staffing solutions across a wide range of fields including AI, cyber security, enterprise architecture, and beyond. For nearly two decades, we've been challenging the status quo of the consulting industry, serving up fresh, ingenious thinking through a radically lean structure. Together, this strategy delivers unprecedented performance at an unparalleled pace for faster results that propel your business forward.
At OP, we help you harness the power of technology for maximum impact. A technology consulting and solutions company, we offer advisory and managed services, innovative platforms, and staffing solutions across a wide range of fields including AI, cyber security, enterprise architecture, and beyond. For nearly two decades, we've been challenging the status quo of the consulting industry, serving up fresh, ingenious thinking through a radically lean structure. Together, this strategy delivers unprecedented performance at an unparalleled pace for faster results that propel your business forward.