Infrastructure Security Tech Lead

SOFTSWISS is looking for an Infrastructure Security Tech Lead to take ownership of the technical direction and architecture of our security infrastructure. You will define and lead the Infrastructure Security strategy and architecture, ensuring that all systems are secure, scalable, and aligned with modern security standards and best practices. Key responsibilities include defining technical direction and architectural decisions across all Infrastructure Security domains, leading security infrastructure reviews for new and existing systems, developing and maintaining technical standards, security policies, and security baselines across domains, owning the Vulnerability Management process across infrastructure domains, and providing technical growth and mentorship to team members. You will also act as a Tier 3 technical escalation point during Incident Response.

7+ years in infrastructure security, including 3+ years in an Architect or Lead role. Strong investigative and analytical problem-solving skills. Practice in building security processes in the corporate environment. Deep hands-on experience with at least one major cloud provider (AWS, GCP, or OCI) focused on security services. Hands-on Linux system administration expertise. Server hardening expertise: CIS Benchmarks, DISA STIG, immutable OS concepts (e.g., Talos Linux). Proficiency in IaC tooling: SaltStack and Terraform. Deep expertise in Kubernetes security: RBAC, Pod Security Standards, Admission Controllers, NetworkPolicy. Experience in development and automation (Python/Go). Experience in SQL, ESQL/DSL (ElasticSearch). Experienced in technical mentorship and task decomposition for teammates. Strong knowledge of Common Secure Network Architectures, Firewalls, IDP/IPS environments. Hands-on experience designing and implementing Zero Trust Architecture (ZTA). Structured written and oral communication to ensure clarity. Ability to formalise security requirements into policies, standards, and control frameworks. Familiarity with enterprise security architecture frameworks (TOGAF/SABSA). Upper Intermediate or higher English level.