Lead Engineer, Infrastructure Security

job summary: Our client is looking for a Lead Security Infrastructure Engineer to join their team.

location: Newport Beach, California job type: Permanent salary: $133,000 - 185,000 per year work hours: 8am to 5pm education: Bachelors

responsibilities: Serve as the dedicated, named liaison to GCS - including Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud teams - consuming security findings, audit results, and risk-prioritized remediation requirements defined by GCS.

Maintain a continuous, standing engagement cadence with GCS leadership to ensure Infrastructure’s Cloud Engineering (Core/On-Prem and Cloud) and Networking teams are aligned to current GCS priorities, SLAs, and control objectives.

Translate GCS inputs into Agile-ready Jira work (stories, tasks, acceptance criteria) aligned to Infrastructure sprint planning.

Execute hands-on remediation for high-risk or complex findings across Azure, hybrid/on-prem, network, and endpoint environments.

Provide direct production change execution for security remediations, following change controls and minimizing business impact.

Guide and mentor Infrastructure engineers on secure configuration, remediation techniques, and security best practices.

Lead remediation efforts across Platform Engineering, Network & Edge, and Client Services.

Security Partnership & Translation: Ability to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.

Agile Enablement: Strong experience converting non-Agile security inputs into sprint-ready work items.

Hands-On Remediation: Expert-level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.

Risk Alignment: Executes remediation strictly aligned to GCS’s risk framework and SLAs.

Technical Leadership: Guides teams on secure practices and serves as escalation point for complex remediation.

Automation Mindset: Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.

Production Discipline: Comfortable making high-impact production changes safely and responsibly.

Vendor & Contractor Oversight: Directs external remediation resources with clear standards and quality control.

Communication: Clear, trusted communicator with Infrastructure leadership and GCS.

Accountability: Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.

Vulnerability Management & Patch Lifecycle: Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.

Cloud Security Posture: Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.

Compliance Frameworks: Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.

qualifications: Must Have Skills - looking for 8+ years ideally

Bachelor’s - in CS, engineering, or related

Certs - CISSP, CISM, CISA, or GIAC / SANS (e.g. GCED, GPEN, GCIH) relevant to infrastructure security

Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.

Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.

Ability to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.

Expert-level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.

skills: Agile,CIS Benchmarks,Cloud,Cloud Security Posture,Cloud Engineering,configuration management,control objectives,Cybersecurity Services,Data Governance,IAM,Computer Science,Jira,Azure,Azure environments,Microsoft security,PCI-DSS,sprint planning,Product Security,Vulnerability Management,Communication,communicator,dedicated,leadership,technical liaison,Accountability,business impact,acceptance criteria,conditional access,audit,Automation,Partnership,CISM,CISA,CISSP,change controls,Client Services,executable,remediation techniques,GCIH,secure configuration,Infrastructure Security,Infrastructure,KPI,mentors,mentor,NIST 800-53,Platform Engineering,quality control,compliance metrics,risk,security,Security Engineering,security best practices,technical leadership

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact HRsupport@randstadusa.com.

Pay offered to a successful candidate will be based on several factors including the candidate’s education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

Qualified applicants in San Francisco with criminal histories will be considered for employment in accordance with the San Francisco Fair Chance Ordinance.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

We will consider for employment all qualified Applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance.

,

Serve as the dedicated, named liaison to GCS - including Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud teams - consuming security findings, audit results, and risk-prioritized remediation requirements defined by GCS.

Maintain a continuous, standing engagement cadence with GCS leadership to ensure Infrastructure’s Cloud Engineering (Core/On-Prem and Cloud) and Networking teams are aligned to current GCS priorities, SLAs, and control objectives.

Translate GCS inputs into Agile-ready Jira work (stories, tasks, acceptance criteria) aligned to Infrastructure sprint planning.

Execute hands-on remediation for high-risk or complex findings across Azure, hybrid/on-prem, network, and endpoint environments.

Provide direct production change execution for security remediations, following change controls and minimizing business impact.

Guide and mentor Infrastructure engineers on secure configuration, remediation techniques, and security best practices.

Lead remediation efforts across Platform Engineering, Network & Edge, and Client Services.

Security Partnership & Translation: Ability to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.

Agile Enablement: Strong experience converting non-Agile security inputs into sprint-ready work items.

Hands-On Remediation: Expert-level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.

Risk Alignment: Executes remediation strictly aligned to GCS’s risk framework and SLAs.

Technical Leadership: Guides teams on secure practices and serves as escalation point for complex remediation.

Automation Mindset: Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.

Production Discipline: Comfortable making high-impact production changes safely and responsibly.

Vendor & Contractor Oversight: Directs external remediation resources with clear standards and quality control.

Communication: Clear, trusted communicator with Infrastructure leadership and GCS.

Accountability: Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.

Vulnerability Management & Patch Lifecycle: Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.

Cloud Security Posture: Hands-on proficiency securing Azure environments using Defender for Cloud, Entra ID conditional access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.

Compliance Frameworks: Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.

Agile,CIS Benchmarks,Cloud,Cloud Security Posture,Cloud Engineering,configuration management,control objectives,Cybersecurity Services,Data Governance,IAM,Computer Science,Jira,Azure,Azure environments,Microsoft security,PCI-DSS,sprint planning,Product Security,Vulnerability Management,Communication,communicator,dedicated,leadership,technical liaison,Accountability,business impact,acceptance criteria,conditional access,audit,Automation,Partnership,CISM,CISA,CISSP,change controls,Client Services,executable,remediation techniques,GCIH,secure configuration,Infrastructure Security,Infrastructure,KPI,mentors,mentor,NIST 800-53,Platform Engineering,quality control,compliance metrics,risk,security,Security Engineering,security best practices,technical leadership