Remote Staff Infrastructure Security Engineer

Description:

• The role is for a Staff Infrastructure Security Engineer at LiveKit, which is a remote position based in the U.S.
• This position requires an engineer who is deeply involved in infrastructure security, rather than just performing theoretical tasks or audits.
• The ideal candidate should have extensive experience with Terraform and be capable of rebuilding images effortlessly.
• Responsibilities include owning the infrastructure security domain from design to execution.
• The engineer will need to maintain and enhance Terraform configurations to ensure infrastructure reliability and security.
• The role involves automating the creation of system images as part of CI/CD pipelines to keep environments up-to-date and compliant.
• The engineer will prioritize and execute security tasks, documenting the process as needed.
• Implementing and enforcing best practices around infrastructure hardening, authentication, and access control is essential.
• Collaboration with the broader engineering team is necessary to ensure secure-by-default design patterns and workflows.
• Staying informed about security threats and emerging tools to keep LiveKit’s infrastructure resilient is a key responsibility.

Requirements:

• Candidates must have prior experience leading security engineering in an infrastructure-heavy company.
• Fluency in Terraform, CI/CD pipelines, and cloud-native tooling is required.
• The ability to audit systems and identify issues at both surface and low levels is essential.
• A strong desire to understand and improve systems at a low level is necessary.
• Candidates should be comfortable documenting and promoting security practices alongside implementing them.
• Knowledge of best practices in security is required, with a commitment to enforcing them.

Benefits:

• The position offers the opportunity to own and drive infrastructure security initiatives.
• Engineers will work in a collaborative environment with a focus on secure design patterns.
• The role allows for continuous learning and staying ahead of security threats and tools.
• There is potential for personal and professional growth within a mature security posture.
• The company values contributions to open-source security tooling and encourages innovation in security practices.