Staff Infrastructure Security Engineer

View all jobs

Staff Infrastructure Security Engineer

Palo Alto, CA, USA

Engineering

In office

Full-time

About Nclusion

Nclusion is on a mission to provide traditional financial services to 1.5 billion people worldwide without access today. Without a secure way to save, invest, or transfer money, individuals are not empowered to accumulate short or long-term wealth. We're changing that by bridging the gap between traditional banking and the communities that need it most.

About the Role

As our Staff Infrastructure Security Engineer, you'll architect and build the security platform that protects our cloud environments, developer ecosystem, and production systems as we scale. This is a deeply hands-on engineering role. You'll spend the majority of your time designing, implementing, and operating security-critical systems. You'll bring technical leadership to infrastructure and engineering teams, and help define how security gets built at Nclusion from the ground up. The right candidate brings serious depth in distributed systems and cloud infrastructure, writes production-quality code, and has built security controls in a regulated environment.

What You’ll do

• Architect and build security platforms, services, and APIs that engineering teams rely on -- including systems for audit logging, monitoring, access controls, and security visibility.
• Design and implement cloud security controls across AWS, Azure, or GCP, with automation for compliance validation, infrastructure governance, and security guardrails.
• Own secrets management, service identity, workload isolation, and secure communications across our infrastructure
• Embed security directly into CI/CD pipelines through tooling for code scanning, dependency analysis, and deployment enforcement.
• Write production-quality, maintainable, and testable code across services, APIs, and automation systems.
• Lead technical design on large-scale security initiatives, from architecture through deployment.

What You Bring to the Table

• 10+ years in Software Engineering, Platform Engineering, Infrastructure, DevOps, SRE, or Security Engineering, with a track record of leading major technical initiatives and system designs
• Strong programming skills in Python, Go, Java, or similar, with hands-on experience building and operating production services, APIs, and distributed systems at scale
• Deep experience with AWS, Azure, or GCP, including Kubernetes, containers, cloud-native architectures, and Infrastructure-as-Code tools like Terraform
• Experience building security-focused systems or platforms, with solid understanding of cloud security, secrets management, secure software delivery, and security monitoring
• Familiarity with IAM, MFA, logging, and audit systems is a plus

Benefits and Perks

• 📈 401k with a match!
• 🩺 Medical Insurance
• 🦷 Dental Insurance
• 👓 Vision Insurance
• 💸 Competitive compensation & equity – We believe in sharing success.
• ✈️ Flexible PTO – We focus on impact, not tracking vacation days. We encourage a minimum of 14 days.
• 🍽️ In-office lunch, team events & culture

Compensation

The base pay range for this role is $220,000 – $270,000 per year.

Ready to apply?

Powered by

First name *

Last name *

Email *

LinkedIn URL *

Phone number *

Location *

Resume *

Click to upload or drag and drop here

Cover letter

Click to upload or drag and drop here

Are you authorized to work in the US? *

Yes

No

I don't know

Will you require visa sponsorship from Nclusion now or in the future? *

Yes

No

I don't know

Are you able to work in-office in Palo Alto, CA four days per week? *

Yes

No

I would relocate for the right opportunity!

Years of Experience *

How many years of experience do you have in industry?

Select an option

Voluntary Self-Identification

To comply with government reporting requirements, we invite candidates to participate in the self-identification survey below. Your completion of this form is entirely optional, and your decision will neither influence the hiring process nor any subsequent stages. Any information you choose to share will be kept confidential and stored in a secure file. As outlined in our Equal Employment Opportunity policy, we uphold a commitment to non-discrimination based on any protected group status specified in applicable laws.

Gender

Please select

Race

Please select

Race and ethnicity descriptionsExpand

Voluntary Self-Identification of Veteran Status

VEVRAA requires Government contractors to take affirmative action to employ and advance in employment protected veterans. To help us measure the effectiveness of our outreach and recruitment efforts of veterans, we are asking you to tell us if you are a veteran covered by VEVRAA. If you believe that you belong to any of the following categories of protected veterans, please indicate by making the appropriate selection.

Veteran status descriptionsCollapse

Disabled veteran

A veteran who served on active duty in the U.S. military and is entitled to disability compensation (or who but for the receipt of military retired pay would be entitled to disability compensation) under laws administered by the Secretary of Veterans Affairs, or was discharged or released from active duty because of a service-connected disability

Recently separated veteran

A veteran separated during the three-year period beginning on the date of the veteran's discharge or release from active duty in the U.S military, ground, naval, or air service

Active duty wartime or campaign badge veteran

A veteran who served on active duty in the U.S. military during a war, or in a campaign or expedition for which a campaign badge was authorized under the laws administered by the Department of Defense

Armed Forces service medal veteran

A veteran who, while serving on active duty in the U.S. military ground, naval, or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985 (61 Fed. Reg. 1209).

Veteran status

Please select

Apply

Req ID: R123