Infrastructure Security Manager

• As the Infrastructure Security Manager, you will establish and scale the security foundations that protect Chainlink’s infrastructure, cloud environments, and decentralized network. This role combines technical leadership with hands-on engineering, building secure infrastructure standards while enabling engineering teams to deliver quickly through automated, secure-by-default platforms. You will lead a small team while remaining deeply involved in architecture, implementation, and delivery.

Your Impact

• Build and standardize secure infrastructure patterns across AWS and Google Cloud Platform, creating a scalable security foundation for future growth.
• Establish unified identity and access management alongside centralized secrets management to significantly reduce infrastructure risk.
• Deliver secure Terraform and GitOps workflows that provide engineering teams with a secure “paved road” for infrastructure deployments.
• Automate infrastructure compliance, logging, and security controls to support SOC 2 Type 2 and banking-grade operational standards.
• Reduce the blast radius of infrastructure compromises by strengthening IAM, platform hardening, and cloud security boundaries across distributed systems.
• Lead the evolution of Infrastructure Security into an engineering-enabled capability that accelerates product delivery while improving organizational security posture.

• Demonstrated recent, hands-on experience authoring and deploying production-grade Terraform for cloud security, including complex IAM, EKS, and VPC implementations through GitOps pipelines such as Atlantis or ArgoCD.
• Proven success leading and mentoring a small engineering team while maintaining direct ownership of technical project delivery as a player-coach.
• Built foundational infrastructure hardening and IAM standards from the ground up in an organization without an established infrastructure security function.
• Experience designing and implementing secure infrastructure using Infrastructure as Code and GitOps practices in production cloud environments.
• Demonstrated ability to architect and secure cloud infrastructure while partnering closely with engineering teams to embed security into development workflows rather than acting as a deployment gatekeeper.

Preferred Requirements

• Experience adapting financial services or banking security standards to modern, high-velocity infrastructure environments.
• Background designing security architectures and trust boundaries for highly distributed systems or decentralized service topologies.
• Demonstrated experience securing identity and access management across both AWS and Google Cloud Platform environments.
• Experience working within DeFi or Web3 environments and understanding the associated infrastructure threat models.
• Built and enforced policy-as-code controls within CI/CD pipelines using technologies such as OPA, CodeQL, or comparable policy enforcement frameworks.
• Designed or operated advanced secrets management or cryptographic infrastructure using technologies such as HSMs, Vault, MPC, or equivalent solutions beyond standard cloud KMS offerings.

Chainlink is the industry-standard oracle platform bringing the capital markets onchain and powering the majority of decentralized finance (DeFi). The Chainlink stack provides the essential data, interoperability, compliance, and privacy standards needed to power advanced blockchain use cases for institutional tokenized assets, lending, payments, stablecoins, and more. Since inventing decentralized oracle networks, Chainlink has enabled tens of trillions in transaction value and now secures the vast majority of DeFi.

Many of the world’s largest financial services institutions have also adopted Chainlink’s standards and infrastructure, including Swift, Euroclear, Mastercard, Fidelity International, UBS, S&P Dow Jones Indices, FTSE Russell, WisdomTree, ANZ, and top protocols such as Aave, Lido, GMX and many others. Chainlink leverages a novel fee model where offchain and onchain revenue from enterprise adoption is converted to LINK tokens and stored in a strategic Chainlink Reserve. Learn more at chain.link.