Infrastructure & Security Engineer

Infrastructure & Security Engineer
You know the moment: a stubborn problem finally makes sense. You find the hidden cause, prove it, and make sure it cannot quietly return.
Here, that satisfaction becomes your everyday work. You’ll turn uncertainty into clarity. You’ll make overlooked systems understandable, dependable, and safe. When something has been held together by memory and luck, you’ll give it a future others can trust.
You’ll feel the pride of protecting experiences people rely on, even when they never see your work.
You’ll give fellow engineers the freedom to build instead of chasing the same failures again. Your curiosity will uncover risks before they become someone else’s crisis.
You’ll set a new standard for how thoughtfully a product can be cared for. You’ll build a legacy in the problems that stay solved, the people who can carry your work forward, and the confidence your judgment earns.
If you love finding the truth and leaving things stronger, this is yours.
Your next 5 minutes could land you in our top 5% shortlist — click Apply to start your application (a short, simple step to put you in the running) → https://www.surveymonkey.com/r/QYYKV2F
ROLE SNAPSHOT
Location/Schedule: India, remote; full-time, India hours with a US overlap and daily standup
Reports to: Director, Technology Engineering Operations (India)
Purpose: Own the infrastructure that products depend on and improve its security, reliability, and operability across cloud and on-premise systems.
KEY RESPONSIBILITIES
Trace product issues across the browser, network, server, application, deployment, and database layers; prove the cause and fix it.
Operate product infrastructure across Azure, AWS, and virtualized Windows and Linux hosts in partnership with IT.
Inventory environments, deployments, configuration, access, and unused resources so the estate can be understood and maintained.
Own deployment paths, automate undocumented steps, and test rollback and backup restoration.
Maintain product edge and identity controls, including DNS, certificates, access reviews, service accounts, and joiner, mover, and leaver processes.
Put secrets in a vault; establish patching, vulnerability closure, logging, audit trails, and least privilege as working practices.
Build tools that fetch live state, write usable runbooks, and document incidents with measured facts clearly separated from reports and inferences.
Review the safety of work produced with AI agents, including changes proposed for deployment.
MUST-HAVE QUALIFICATIONS
Development experience: you can read application source and build useful tooling, rather than only administer systems or write procedures.
Working proficiency across Windows Server, Linux, a web application stack, relational databases, and networking fundamentals.
Strong scripting in PowerShell, Python, or Bash; Git; and hands-on use of at least one CI/CD system.
Administrator-level virtualization experience and enterprise backup experience that includes a restore you personally performed.
Depth in Azure or AWS and working knowledge of the other.
Ability to operate managed Kubernetes workloads: read manifests, establish the running image and configuration, deploy, and roll back.
Practical Active Directory and Entra ID administration, including groups, service accounts, single sign-on, and multi-factor authentication.
Hands-on security practice involving access, secrets, patching, certificates, useful audit logs, and exposure-based prioritization.
API literacy, systematic troubleshooting, current hands-on use of AI agents with sound review judgment, and clear written English.
Around three to six years of relevant work is indicative, not a cutoff. A degree, a particular job title, and years in every listed technology are not required.
PREFERRED QUALIFICATIONS
Terraform, Ansible, or Bicep.
Microsoft 365, conditional access, and Defender administration.
Next-generation firewall administration; central logging or SIEM; vulnerability scanning; monitoring and alert improvement.
Relevant security, cloud, virtualization, or networking certifications.
Penetration-testing exposure, access-review ownership, or closure of penetration-test findings.
PCI DSS or HIPAA exposure, commerce or ERP infrastructure, or experience making a single-owner system operable by others.
WHAT WE OFFER
Remote work from India, with India hours and a US overlap.
Hands-on ownership of the product estate, with support and a clear working boundary with IT.
Room to investigate, build tooling, improve security, and make systems maintainable by more than one person.
A team where reporting an exposure is encouraged and evidence-based incident work is expected.
Occasional genuine out-of-hours incident work that is recognized; the JD does not describe a nightly on-call rota.
HONEST CHALLENGE
A meaningful part of the first year involves discovering how undocumented environments actually work. You will receive broad production access early, including systems involving health and payment data, and must use it with discretion. Success means closing risks and leaving an auditable trail, not merely finding problems. The short ~5-minute application step asks for concrete examples of your work.
READY TO JUMP IN?
Click Apply to start the short application (about 5 minutes; embedded step) → https://www.surveymonkey.com/r/QYYKV2F
Important: Completing the embedded application step is required to be considered.
Mercola welcomes applicants of every background, identity, and life experience.

Work arrangement
Yes