Infrastructure Security Engineer

Responsibilities

• Own the security architecture of the production cloud environment, including multi-account AWS, Kubernetes clusters, and the identity plane.
• Evaluate, build, and operate cloud security visibility and protection platforms to drive automated remediation of infrastructure risks.
• Define and drive a zero trust access strategy, integrating device trust and identity-aware proxies.
• Harden Kubernetes environments through RBAC, admission policies, workload identity, and runtime protection.
• Build agentic detection and response workflows using AWS native primitives to close the loop from alert to remediation.
• Implement shift-left cloud security strategies within CI/CD pipelines using Terraform and GitHub Actions.
• Partner with Infrastructure teams on VPC architecture, secrets management (Vault), and service identity.
• Manage cloud detection engineering using tools like GuardDuty, Security Hub, and CloudTrail.

Requirements

• 5+ years of cloud or infrastructure security experience with deep AWS expertise.
• Proficiency in at least one programming language: Go, Python, or TypeScript.
• Hands-on experience with Kubernetes security (RBAC, network policies, admission control).
• Experience deploying and operating cloud posture and workload protection tooling (e.g., Wiz, Prisma, Orca, or equivalent).
• Strong ability to write and read Terraform and shell scripts.
• Demonstrated ability to build identity and access management solutions at scale.
• Ability to work onsite in the Seattle office four days per week.

Preferred Qualifications

• Experience designing or operating Zero Trust Network Access (e.g., Cloudflare Access, Tailscale).
• Background in detection engineering with a threat modeling and adversarial mindset.
• Experience securing AI/ML pipelines, agent frameworks, or MCP-style integrations.
• Familiarity with SOC 2 or SOX compliance frameworks in cloud environments.
• Open source contributions to cloud security tooling (e.g., Falco, Kyverno, OPA).

About the Company

Opendoor is building the modern system of homeownership, providing an end-to-end online experience that gives people the freedom to buy and sell homes on their own terms.