{"id":3364988,"url":"https://alion.io/job/ridgeline-principal-infrastructure-security-engineer","title":"Principal Infrastructure Security Engineer","company":{"id":1547962,"name":"Ridgeline","domain":"ridgeline.ai","url":"https://alion.io/company/ridgeline","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":6,"ghost_share":0,"stale_share":0.667,"repost_share":0.167,"time_to_fill_p50_days":58,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dublin, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":90000,"max_usd":234000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon Aurora","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"Cosign","optional":false},{"name":"DynamoDB","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"Istio","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"OpenTofu","optional":false},{"name":"Python","optional":false},{"name":"Service Mesh","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-10-27T21:43:12Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-31T19:18:56Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Principal Infrastructure Security Engineer\nLocation: Dublin, IE\nRidgeline is hiring a Principal Infrastructure Security Engineer to set the direction for cloud and infrastructure security across every product line, account, and environment. You will define the architecture vision and the security invariants that guide engineering decisions, and you will be accountable for Ridgeline’s overall cloud security posture. \nYou will work with Engineering, Product Management, and Technology leaders on cloud security trade-offs that carry business, regulatory, or reputational consequences. You will also help build the team's technical culture and develop Staff-level engineers, so that its standards, detection frameworks, and architectural judgment last beyond any single project. We believe in a culture where security is everyone's responsibility and an integral part of our engineering philosophy.\nAt Ridgeline, how we work matters as much as what we build. Ridgeliners act like owners, choose growth over comfort, and communicate with transparency. We assume positive intent, bias toward action, and bring solutions-not just problems. We celebrate wins, learn from setbacks, and thrive in a resilient, collaborative, high-performing culture.\nIf this excites you, we’d love to meet you.\nYou must be permitted to work in Ireland, including under EU work authorization, without the need for employer sponsorship.\nWhat You’ll Do\nOwn the multi-year cloud security architecture vision and the security invariants that govern engineering decisions across all product lines, AWS accounts, and infrastructure.\nSet the technical strategy for cloud security tooling and automation, including how AI changes security operations, and make the build-versus-buy decisions that determine what the team can do for years.\nDrive company-wide guardrails and controls in our AWS environment (e.g., SCPs, IAM boundaries, AWS managed security services, custom-built solutions, and policy-as-code), and implement the standards and processes that keep them enforced.\nDevelop threat models and security approaches, and identify emerging threats to identity, data, AI workloads, and infrastructure before they become problems.\nCreate frameworks and methodologies for securely integrating third-party cloud services and internal platforms, and see them adopted across Ridgeline.\nAnticipate broad changes in cloud and infrastructure security, identify where our current approach stops scaling, and propose fixes before it does.\nBuild AI and automation frameworks, and partner across functions to deploy reusable agents that multiple teams use.\nDeliver large, cross-team projects on schedule and at high quality, breaking complex programs into pieces the contributing teams can execute.\nBuild the cloud security team's long-term technical culture, develop Staff-level cloud security engineers, and sponsor the next leaders at Ridgeline.\nShape C-suite and board-level decisions on cloud security investment, cloud adoption strategy, and organizational risk acceptance.\nWho You Are & What Makes You Qualified:\n10+ years of relevant experience in cloud security or platform engineering, including experience leading large cross-team initiatives with company-wide impact and delivering them on schedule.\nAdvanced proficiency in at least one high-level language (Python strongly preferred; Kotlin or TypeScript a plus).\nExpert-level experience with AWS, especially in the following areas:\nIdentity and Access Management (IAM, Orgs & SCPs, Identity Center)\nNetworking (VPC, Security Groups, Transit Gateway, Load Balancers, Network Firewall)\nCompute (EKS, ECS, Lambda)\nData Persistence (S3, Aurora, DynamoDB)\nLogging & Monitoring (GuardDuty, CloudTrail, CloudWatch)\nDemonstrated success defining enterprise-wide access management strategy and policy frameworks (IAM/SCPs), and cloud security architecture that engineering teams adopted.\nDeep understanding of cloud workload protection, infrastructure monitoring, and threat detection in AWS-native environments.\nExpert-level experience securing Kubernetes and Amazon EKS (including EKS Auto Mode): cluster access control, network policy, Istio service mesh, Kyverno admission policy, and image signing with cosign.\nFluency with infrastructure-as-code (e.g., OpenTofu or Terraform), GitOps delivery (e.g., ArgoCD), and CI/CD practices, and experience setting tooling and automation strategy, including build-versus-buy decisions.\nProven ability to present cloud security risk and trade-offs to executives, and to influence investment, cloud adoption, and risk acceptance decisions.\nTrack record of anticipating broad change in cloud security and acting on it before it became urgent.\nExperience building AI or automation frameworks and reusable agents that change how cross-functional teams work.\nExperience developing senior engineers and sponsoring emerging leaders, and building team standards, detection frameworks, and architectural judgment that outlast individual projects.\nAbout Ridgeline\nRidgeline is headquartered in Lake Tahoe, with offices in New York, Reno, the Bay Area, Dublin Ireland. Ridgeline is recognized by Fast Company as a “Best Workplace for Innovators,” by Frost & Sullivan as a “Technology Innovation Leader,” and by The Software Report as a “Top 100 Software Company.”\nRidgeline is proud to be a community-minded, discrimination-free equal opportunity workplace.\nRidgeline processes the information you submit in connection with your application in accordance with the Ridgeline Applicant Privacy Statement. Please review the Ridgeline Applicant Privacy Statement in full to understand our privacy practices and contact us with any questions.","description_format":"text","description_chars":5685,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Financial Services","Asset Management & Funds","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-27T22:40:04Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":58,"reasons":["conf:1","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/ridgeline-principal-infrastructure-security-engineer","json_url":"https://alion.io/job/ridgeline-principal-infrastructure-security-engineer.json","meta":{"generated_at":"2026-10-31T21:53:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34129,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1547962},"rest":"https://alion.io/mcp/rest/get_company?id=1547962"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fridgeline-principal-infrastructure-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fridgeline-principal-infrastructure-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fridgeline-principal-infrastructure-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ridgeline-principal-infrastructure-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fridgeline-principal-infrastructure-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3364988}},{"tool":"search_jobs","arguments":{"company":"ridgeline.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3364988},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}