> Markdown version of [/jobs/ext/1249740-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/1249740-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Infrastructure Security Engineer - **Company:** Modal Labs - **Location:** New York, NY, United States - **Salary:** $150,000.0 - $270,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Systems Engineering, Cloud Computing, Cloud Computing Security, Computer Networks, Distributed Systems, Identity and Access Management, Key Management, Cloud Platform System, Backend, Containerization, Kubernetes - **Published:** July 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ab8c68578b2e2993 ## About the Role Core Experience * Experience securing cloud-native infrastructure and distributed systems in production * Background in infrastructure, backend, or security engineering * Experience working in multi-tenant or high-scale environments Technical Depth * Strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar) * Experience designing or securing isolation mechanisms in multi-tenant systems * Solid understanding of authentication, authorization, and service identity models * Experience with secrets management and secure handling of credentials * Strong foundation in networking concepts (segmentation, service communication, access boundaries) Mindset * Builder mentality, you design and implement, not just review * Pragmatic approach to security in fast-moving environments * Comfortable working deeply with engineers and influencing system design, * Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar) * Familiarity with kernel-level or low-level isolation primitives * Experience securing Kubernetes or similar orchestration systems in production * Background in developer infrastructure, compute platforms, or multi-tenant systems ## Description We're looking for an Infrastructure Security Engineer to design and secure the core systems that power our platform. This role focuses on building security directly into our infrastructure-from container isolation and orchestration to identity and secrets management in a multi-tenant, cloud-native environment. You'll work closely with engineering teams to define secure primitives and ensure our platform is resilient, scalable, and trustworthy by design. This is a hands-on, deeply technical role focused on real systems, not compliance or policy. What You'll Do: Platform & Runtime Security * Design and improve isolation mechanisms for multi-tenant workloads (containers, sandboxing, execution environments) * Strengthen boundaries between customers, workloads, and internal systems * Identify and mitigate risks in distributed, dynamic compute environments Container & Orchestration Security * Secure and harden containerized workloads and orchestration systems (e.g., Kubernetes or similar) * Improve workload isolation, scheduling boundaries, and runtime protections * Evaluate tradeoffs in multi-tenant execution models Identity & Access Management * Design and improve authentication and authorization systems across services * Implement strong service-to-service identity and least-privilege access patterns * Improve access controls across infrastructure and internal systems Secrets & Key Management * Build and maintain systems for securely managing secrets, tokens, and credentials * Improve rotation, auditing, and access controls * Reduce secret sprawl and integrate secure patterns into developer workflows Cloud & Infrastructure Security * Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability * Improve network boundaries, service segmentation, and access controls * Embed security into infrastructure-as-code and deployment systems Engineering Partnership * Work closely with product and infrastructure teams to design secure systems from the ground up * Review architecture and code for security risks and provide actionable guidance * Identify patterns in risks and drive cross-cutting improvements ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus)