Infrastructure Security Engineer building workload identity, authentication, and authorization infrastructure. WorkOS provides developer tools and APIs for enterprise-ready software.
Responsibilities
Build workload identity infrastructure that makes short-lived identity credentials a default part of every application's runtime environment.
Bring identity-based authentication to internal services using identity certificates and establish them as the golden path for new applications.
Drive migration of existing internal services from legacy authentication approaches.
Replace static passwords and service tokens with short-lived identity credentials.
Build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for external dependencies.
Build a unified interface and framework for centrally managing and enforcing authorization policies.
Partner with application platform owners and internal dependency owners.
Drive adoption across engineering teams while making security frictionless.
Requirements
5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.
Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.
Deep knowledge of authentication and authorization, including JWTs and X.509 certificates.
Ability to work legally in the United States; sponsorship question is included in the application.
Senior DevOps Engineer operating AWS, Kubernetes, and blockchain infrastructure for Startale’s onchain finance products. Owning reliability, security, deployment, and production operations for StartaleApp and Strium.
Senior Cloud Infrastructure Engineer scaling AWS networking and storage for Mecka AI’s robotics and embodied AI data infrastructure. Leading reliability, security, transfer, and cost optimization.
Senior infrastructure developer owning AWS environments, internal applications, and enterprise integrations. Supporting Benevity’s technology platform that enables companies and employees to take social action.
Senior developer owning AWS infrastructure, security, and integrations for Benevity’s technology platform. Supporting internal applications that help companies and employees take social action.
Infrastructure Engineer building secure, automated Azure environments for PLATO, Canada’s largest Indigenous - owned software testing and technology services company. Applying Terraform, IaC, and DevOps practices across cloud infrastructure.
Infrastructure support engineer handling incidents, troubleshooting, monitoring, and service requests for Genpact’s enterprise technology services. Supporting hybrid operations on rotational night shifts in Montreal.
Senior Infrastructure Engineer rebuilding Stream’s real - time platform as it migrates from AWS to GCP. Owning Kubernetes, PostgreSQL scaling, cloud efficiency, and reliability.
Senior Infrastructure Engineer designing and delivering customer infrastructure solutions for Redesign Group, a technology and cybersecurity provider. Leading implementations, documentation, technical reviews, and engineer mentorship in Toronto.
Security and Infrastructure Engineer securing Nexxa’s AI systems for heavy industries. Owning cloud infrastructure, security operations, and SOC 2/ISO 27001 compliance.