# Infrastructure Security – Tech Lead

[Softswiss](https://gurify.com/jobs?q=Softswiss) · Posted 4 months ago

Lead

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://softswiss.teamtailor.com/jobs/7533943-infrastructure-security-tech-lead)

## Job description

### Overview:

SOFTSWISS is looking for an Infrastructure Security Tech Lead to take ownership of the technical direction and architecture of our security infrastructure.

### Purpose of the role:

You will define and lead the Infrastructure Security strategy and architecture, ensuring that all systems are secure, scalable, and aligned with modern security standards and best practices.

### Key responsibilities:

- Define technical direction and architectural decisions across all Infrastructure Security domains

- Lead security infrastructure reviews for new and existing systems

- Develop and maintain technical standards, security policies, and security baselines across domains

- Own the Vulnerability Management process across infrastructure domains

- Technical growth and mentorship of team members

- Act as Tier 3 technical escalation point during Incident Response

### Required Experience:

- 7+ years in infrastructure security, including 3+ years in a Architector or Lead role

- Strong investigative and analytical problem-solving skills.

- Practice in building security processes in the corporate environment

- Deep hands-on experience with at least one major cloud provider (AWS, GCP, or OCI) focused on security services

- Hands-on Linux system administration expertise

- Server hardening expertise: CIS Benchmarks, DISA STIG, immutable OS concepts (e.g., Talos Linux)

- Proficiency in IaC tooling: SaltStack and Terraform

- Deep expertise in Kubernetes security: RBAC, Pod Security Standards, Admission Controllers, NetworkPolicy

- Experience in development and automation (Python/Go)

- Experience in SQL, ESQL/DSL (ElasticSearch)

- Experienced in technical mentorship and task decomposition for teammates

- Strong knowledge of Common Secure Network Architectures, Firewalls, IDP/IPS environments

- Hands-on experience designing and implementing Zero Trust Architecture (ZTA)

- Structured written and oral communication to ensure clarity

- Ability to formalise security requirements into policies, standards, and control frameworks

- Familiarity with enterprise security architecture frameworks (TOGAF/SABSA)

- Upper Intermediate or higher English level

### Nice to have:

- Practice with Splunk, Clickhouse.

- Experience creating network segmentation through various technologies such as routing, virtual networking, and SDN.

- Public contributions: open-source projects, conference talks (DEF CON, Black Hat, OWASP AppSec)

- Experience with Docker, Kubernetes, Istio and similar technologies

- Knowledge of IAM, SSO, VPN, OpenID, SAML

- Strong knowledge of endpoint & infrastructure security such as Audit.d, sysmon, apparmor, tetragon, selinux, etc

### Our Benefits:

- Full-time remote work opportunities and flexible working hours

- Private insurance

- Additional 1 Day Off per calendar year

- Sports program compensation

- Comprehensive Mental Health Program

- Free online English lessons with a native speaker

- Generous referral program

- Training, internal workshops, and participation in international professional conferences and corporate events.

**Live in Softswiss’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- SO [Application Security Engineer - Senior](https://gurify.com/job/application-security-engineer-senior-at-softswiss-e38c568920d6) Softswiss · 3 weeks ago
- TS [Technical security officer - Centric](https://gurify.com/job/technical-security-officer-centric-a80494d658fe) Gouda, Nederland · last week
- GI [Director of Engineering, Security Factory](https://gurify.com/job/director-of-engineering-security-factory-at-gitlab-577a006e6f2f) Gitlab · last week
- AL [Senior Cloud Security Engineer](https://gurify.com/job/senior-cloud-security-engineer-at-alphasense-bcd0f12b79cf) Alphasense · London, Greater London, England, United Kingdom; United Kingdom · last week
- EL [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-eleoshealth-cb191040bdab) Eleoshealth · last week
- CH [Product Manager, Security](https://gurify.com/job/product-manager-security-at-chainalysis-4fe1cf255f30) Chainalysis · Tel Aviv Office · last week

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Infrastructure Security \u2013 Tech Lead","item":"https://gurify.com/job/infrastructure-security-tech-lead-at-softswiss-a15c0cf90be6"}]}
```