Security & Infrastructure Engineer

About Illumbria

Illumbria exists to discover what AI makes possible and build what comes next. We are drawn to ideas that once seemed out of reach, and to possibilities that people have not yet imagined. Through product design, applied AI, and engineering, we create AI-native applications that expand how organizations work and what they can offer their customers.

We are building a company where curious, ambitious people can help shape both the ideas and their implementation. Our work crosses industries and disciplines, often taking us into problems with no established approach. That calls for independent thinking, experimentation, and the judgment to turn new possibilities into software people can depend on.

We care deeply about what we build and how well we build it. We want people who question assumptions, contribute their own ideas, and take responsibility for seeing them through. The opportunity is to help define what these applications can become—and do the work that brings them into existence.

The Role

You will expand and operate the cloud infrastructure behind our clients’ AI-native applications. You will work with application engineers to deploy services safely and keep each client’s data isolated.

You will also own the technical side of SOC 2 compliance. Working with our compliance advisor, you will implement controls and verify that they work in production, from checking who has access to client data to testing whether a service can be restored from backup.

Responsibilities

• Build and maintain cloud, database and storage environments with clear boundaries between clients, including redundancy across zones and encrypted backups in a second region.
• Run restore exercises, measure recovery time and data loss against agreed targets, and document the steps another engineer can follow.
• Independently review other engineers’ production changes for security and operational risk, and document the review.
• Automate deployments and test rollbacks so a failed release can be reversed safely.
• Manage user and service access, MFA, private networking, secrets and encryption so each person and application can reach only what they need. Review access regularly.
• Implement monitoring, logging, alerting and endpoint protection. Use them to diagnose failures, lead incident response, and verify that service has recovered.
• Scan for vulnerabilities, coordinate penetration tests, and verify in production that patches and other fixes address the findings.
• Work with our external compliance advisor to turn SOC 2 policies into working technical controls, maintain the evidence through the observation period and examination, and answer client security questionnaires.

How We Work

AI coding agents are part of our everyday engineering work. You will use them to write scripts, review configuration, and investigate failures. Before a change reaches production, you are responsible for understanding what it affects, testing it, and knowing how to roll it back.

You will have clear priorities and room to decide how to approach them. When a change could affect a client environment, you will explain the tradeoffs and how you will verify the result.

Requirements

• Experience building and operating production cloud and Linux infrastructure for a customer-facing application. You can trace a failed request through DNS, network access rules and application logs.
• Experience working in a production environment subject to SOC 2 Type II controls.
• Experience restoring a database or application from backup and verifying that it works after recovery.
• Working knowledge of identity and access management, network security, encryption, secrets management, vulnerability remediation and incident response.
• Ability to read application code and configuration, and find operational and security problems in them.
• Ability to automate routine operations with scripts.
• Willingness to use AI coding agents and independently verify their output.
• Clear written communication, including answers that hold up under review by a client's security team or an auditor.

Helpful Experience

• Building and running infrastructure for AI systems.
• Developing or operating AI systems in a regulated environment.
• Banking, financial services or another regulated industry.
• Operating applications that handle sensitive client data in isolated environments.
• Securing agent access to tools and protecting sensitive data shared with model providers.
• AWS, Cloudflare, PostgreSQL and GitHub, or comparable platforms.
• ISO 27001 or other compliance frameworks beyond SOC 2.

What We Offer

• Flexible hours and competitive pay.
• Direct responsibility for the environments you build and the controls that protect them.
• Work across client projects, with room for a longer engagement.