> Markdown version of [/jobs/ext/1277632-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/1277632-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Infrastructure Security Engineer - **Company:** Stack Infrastructure - **Location:** Denver, CO, United States - **Experience:** Expert - **Salary:** $128,260.0 - $144,934.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Software System Penetration Testing, Backup Devices, Network Operating System (NOS), Cloud Computing Security, Cyber Security, Domain Name System (DNS), Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Linux Servers, Network Segmentation, PCI Data Security Standards, Zero Trust Network Access, Security Information and Event Management, Network Routers, In-Plane Switching (IPS), Mitre Att&ck, Firewalls (Computer Science), Information Technology, Vulnerability Analysis - **Published:** July 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=cd5d74c6c217d0fb ## About the Role * Must pass comprehensive background screening. * Must be willing to work flexible hours across time zones. * Must be willing to participate in an on-call rotation to ensure 24/7/365 coverage., * 10-15 years hands-on network security engineering experience, specializing in Firewalls and Infrastructure security. * Strong Palo Alto and Panorama experience. Other enterprise firewall experience accepted but Palo Alto is preferred. * Exposure and experience with International and multi-country IT security programs. * Certifications in one or more of the following disciplines/providers preferred: CISSP, CEH, GIAC (GSEC, GCIH, etc.), ISACA, Other Networking/Network Security related certifications. * Experience and familiarity with cyber incident response, SIEM, vulnerability scanning tools, security operations workflow, IPS, Browser security, Cloud security, and Endpoint Security. * Familiarity with security-related compliance such as NIST CSF, CIS Critical Security Controls, ISO 27001/27002 and regulations such as GDPR, HIPAA, SOC1/2, and PCI-DSS. * Strong understanding of MITRE ATT&CK framework. * An analytical security-focused mind, outstanding problem-solving skills, and strong threat assessment and mitigation skills. * Strong communication and interpersonal skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders. Exceptional documentation and report generation skills. * Great awareness of cybersecurity trends, emerging threats, and techniques., * You are a strong communicator, you are persuasive and clear, blending analytics with experience in decision-making. * You do not get flustered easily. You can juggle multiple priorities while balancing urgent requests with shifting timelines and deliverables. * You are a team builder. You take the time to understand and develop the strengths of your resources while formulating long-term plans for the growth and success of the team. * You are naturally curious and driven toward continual improvement. While you celebrate your successes, you take time to review and analyze campaigns for future learning. ## Description At STACK Infrastructure, the Sr. Infrastructure Security Engineer is a key member of the team responsible for multiple aspects of IT cybersecurity and support of Operational Technology cybersecurity needs., The Sr Infrastructure Security Engineer position requires expertise in support of running a highly available, secure, and scalable environment. The position will require the development and maintenance of our datacenter environments. Technologies will include, but not be limited to firewalls, IDS/IPS, switches, routers, VPNs, edge security architectures, Windows and Linux servers/appliances, archiving and backup, encryption, business continuity, security risk assessment, and support of Operational Technology applications. The position works under minimal direction with considerable latitude as part of a global security team where the use of critical analysis, initiative, and independent judgment are highly desirable. The position will be required to utilize project management and time management skills to ensure timely delivery of business and departmental objectives. Responsibilities include, but are not limited to: * Planning, implementing, managing, monitoring, and upgrading security measures for the protection of STACK Infrastructure's data, systems, and networks. * Monitor and triage critical IT infrastructure for irregular behavior/weaknesses and respond with robust countermeasures to prevent future incidents. * Zero Trust Implementation: Champion a Zero Trust security model across STACK's network and datacenter environments. Architect solutions that enforce least-privilege access, continuous verification, and micro-segmentation of services - ensuring no implicit trust at any layer. * Install and maintain security tools that monitor critical infrastructure (systems and networks) for security breaches and intrusions. * Leading or collaborating with peers on project management to accomplish the goals set by leadership. * Providing SME-level advice and expertise regarding various technologies and enable leadership to drive security objectives and improve STACK's overall security posture. * Triage and investigate security and user high-risk events. * Lead/participate in incident response and investigation of IT/OT security detections and incidents. * Infrastructure and Network OS security hardening * Monitoring and optimization of security tools * DNS management * Penetration testing remediation * Policy enforcement * Attack surface management and threat hunting * Participation in an on-call rotation with your team to ensure 24/7/365 coverage. * Work closely with cross-functional teams, including IT Support, IT Infrastructure, and Critical Operations teams, to ensure systems and networks are secure, compliant with applicable regulations, and protected against unauthorized access * Serve as a point of escalation and support for Information Technology and international IT administrators security needs. * Other duties as assigned ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes) - [The Software Bug All Stars - and what we can learn from them](https://www.wearedevelopers.com/videos/423-the-software-bug-all-stars-and-what-we-can-learn-from-them) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Build Your Own Subscription-based Course Platform](https://www.wearedevelopers.com/videos/321-build-your-own-subscription-based-course-platform) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top Characteristics of a Software Engineer](https://www.wearedevelopers.com/magazine/166-top-characteristics-of-a-software-engineer)