Infrastructure Security – Tech Lead

April 27, 2026 Auto Import

<h2>Overview:</h2>SOFTSWISS is looking for an Infrastructure Security Tech Lead to take ownership of the technical direction and architecture of our security infrastructure. <h2>Purpose of the role:</h2>You will define and lead the Infrastructure Security strategy and architecture, ensuring that all systems are secure, scalable, and aligned with modern security standards and best practices. <h2>Key responsibilities:</h2><ul><li>Define technical direction and architectural decisions across all Infrastructure Security domains</li><li>Lead security infrastructure reviews for new and existing systems</li><li>Develop and maintain technical standards, security policies, and security baselines across domains</li><li>Own the Vulnerability Management process across infrastructure domains</li><li>Technical growth and mentorship of team members</li><li>Act as Tier 3 technical escalation point during Incident Response</li></ul><h2>Required Experience:</h2><ul><li>7+ years in infrastructure security, including 3+ years in a Architector or Lead role</li><li>Strong investigative and analytical problem-solving skills.</li><li>Practice in building security processes in the corporate environment</li><li>Deep hands-on experience with at least one major cloud provider (AWS, GCP, or OCI) focused on security services</li><li>Hands-on Linux system administration expertise</li><li>Server hardening expertise: CIS Benchmarks, DISA STIG, immutable OS concepts (e.g., Talos Linux)</li><li>Proficiency in IaC tooling: SaltStack and Terraform</li><li>Deep expertise in Kubernetes security: RBAC, Pod Security Standards, Admission Controllers, NetworkPolicy</li><li>Experience in development and automation (Python/Go)</li><li>Experience in SQL, ESQL/DSL (ElasticSearch)</li><li>Experienced in technical mentorship and task decomposition for teammates</li><li>Strong knowledge of Common Secure Network Architectures, Firewalls, IDP/IPS environments</li><li>Hands-on experience designing and implementing Zero Trust Architecture (ZTA)</li><li>Structured written and oral communication to ensure clarity</li><li>Ability to formalise security requirements into policies, standards, and control frameworks</li><li>Familiarity with enterprise security architecture frameworks (TOGAF/SABSA)</li><li>Upper Intermediate or higher English level </li></ul><h2>Nice to have:</h2><ul><li>Practice with Splunk, Clickhouse.</li><li>Experience creating network segmentation through various technologies such as routing, virtual networking, and SDN.</li><li>Public contributions: open-source projects, conference talks (DEF CON, Black Hat, OWASP AppSec)</li><li>Experience with VMware NSX, Neutron, Docker, Kubernetes, Istio and similar technologies</li><li>Knowledge of IAM, SSO, VPN, OpenID, SAML</li><li>Strong knowledge of endpoint & infrastructure security such as Audit.d, sysmon, apparmor, selinux, etc</li></ul><h2>Our Benefits:</h2><ul><li>Full-time remote work opportunities and flexible working hours</li><li>Private insurance</li><li>Additional 1 Day Off per calendar year</li><li>Sports program compensation</li><li>Comprehensive Mental Health Programme</li><li>Free online English lessons with a native speaker</li><li>Generous referral program</li><li>Training, internal workshops, and participation in international professional conferences and corporate events.</li></ul>

Back to blog