Security and Infrastructure Engineer

About You:

• 8+ years of experience in cloud, infrastructure, or security engineering roles, including experience setting technical direction across multiple teams, not just executing within one.
• Deep hands-on experience with at least one major cloud provider, preferably AWS; Azure experience is a plus.
• Strong experience designing and securing cloud IAM, networking, secrets management, and distributed systems at scale.
• Extensive experience with infrastructure as code (Terraform or CloudFormation) and policy as code; you default to automation and preventative controls over manual review.
• Experience building or operating detection and response systems including SIEM, CSPM/CIEM, and cloud security monitoring.
• Experience with or a strong point of view on securing LLM and agentic AI systems: guardrails, safe tool use, and failure isolation.
• A track record of turning recurring security and infrastructure requests into self-serve tooling, retiring ticket queues rather than staffing them.
• Proven ability to translate compliance and risk requirements into technical implementations.
• Strong communicator who can influence architecture and engineering decisions across teams, and mentor senior engineers through design reviews and hands-on guidance.
• Comfortable operating independently, owning long-term technical initiatives, and carrying a share of security-relevant on-call.

What You Will Do:

Cloud Security Architecture & Engineering

• Architect, design, and operate security technologies across cloud, network, identity, endpoint, and application layers in public, private, and hybrid environments.
• Define cloud security reference architectures, threat models, and guardrails aligned with zero trust and least privilege principles.
• Own the technical lifecycle of security tooling including cloud-native security services, SIEM, CSPM, CIEM, EDR, DLP, and vulnerability management platforms.

Agentic Platform Security

• Build safety guardrails into the platform itself so failures like an agent bypassing a playbook safeguard cannot reach a customer.
• Partner with the Reasoning Engine and Playbooks teams on agent behavior that is safe by construction.
• Set the security bar inside Product Development: secure-coding standards, review practice, and threat modeling for new agentic features.

Detection, Response & Automation

• Stand up security observability: detection, alerting, and response for the platform, wired into Datadog and Sentry alongside the wider observability push.
• Engineer automated response and remediation workflows using cloud-native automation, SOAR, and infrastructure as code.
• Lead cloud security incident investigations, carry a share of security-relevant on-call, and feed every incident back into tooling so it does not recur.

Self-Serve Security Enablement

• Turn recurring security and infra requests (access provisioning, environment setup) into self-serve tooling — retire the ticket queue rather than staff it.
• Embed security into CI/CD pipelines, platform tooling, and deployment workflows using policy as code and automated guardrails, so engineering teams ship faster without compromising security.

Governance, Risk & Compliance Enablement

• Translate security and regulatory frameworks (NIST SP 800-53, PCI DSS, CIS Benchmarks, AWS Well-Architected) into enforceable technical controls.
• Lead the engineering side of vendor and dependency security: reviews, least-privilege access, and cutting overlapping tools from the stack.
• Support audits, risk assessments, and evidence collection with internal compliance and external assessors.

Technical Leadership

• Serve as the subject matter expert for cloud and platform security and its relationship to Ada's business-critical systems.
• Mentor security and platform engineers through documentation, design reviews, and hands-on guidance.
• Operate with high autonomy, making architectural decisions that shape long-term security posture and platform scalability.

Outcomes:

• Own secure-by-default infrastructure for the agentic platform across AWS and Azure: identity, secrets management, network boundaries, and access control.
• Establish a secure-by-default cloud security architecture that scales with Ada’s growth, reducing risk through automation and preventative controls.
• Close the guardrail gaps that could let unauthorized agent actions reach a customer.
• Improve detection, response, and incident readiness across cloud environments.
• Enable engineering teams to ship faster without compromising security, and raise the bar for security engineering maturity across the organization.
• First 90 days: map the current attack surface and access model, ship one self-serve replacement for a high-volume manual security request, and close the guardrail gap that let unauthorized actions through.

Benefits & Perks:

• Unlimited Vacation: Recharge when you need to.
• Comprehensive Benefits: Extended health coverage, dental, vision, travel, and life insurance.
• Wellness Account: Empowering you to invest in your overall well-being and lifestyle.
• Employee & Family Assistance Plan: Resources to support you and your loved ones.
• Flexible Work Schedule: Balance your work and personal life.
• Remote-First, In-Person Friendly: Options to work from home or at our local hub.
• Learning & Development Budget: Invest in your long-term growth goals and skills.
• Work from Home Budget: Equipping you with the tools and support for a seamless remote work experience.
• Access to Cutting-Edge AI Tools: Work with the best AI tech stack in the industry.
• Hands-On with LLMs: Enhance your expertise in leveraging large language models.
• A Thriving Industry: Join the forefront of innovation in AI, shaping the future of technology.

The above Benefits and Perks only apply to full-time, permanent employees.

As part of our recruitment process, we may use AI enabled tools to support certain aspects of hiring, such as interview note-taking. All hiring decisions are made by our team.

Thank you for your interest in joining us at Ada. Due to the high volume of applications, we will only contact candidates whose qualifications match closely to the requirements of the position. We appreciate the time you have invested in learning more about us.