Infrastructure Engineer

Job Title: Infrastructure Security Engineer

Location: Remote

Duration: Long term Contract

Note: Only on W2

Job Description:

We are seeking an Infrastructure Security Engineer to build out a comprehensive threat model for the Teradata AI Factory platform — an enterprise on-premises data and AI appliance. The successful candidate will bring deep infrastructure security expertise spanning operating systems, networking, compute, storage, identity and key management, and virtualization or container environments. Working closely with platform architects, the engineering security team, and the corporate security team, they will apply that expertise to systematically identify and document threats across the full appliance stack — translating architecture knowledge into structured threat model components and artifacts using Irius Risk. Platform architecture knowledge is not expected on day one; architectural diagrams and system documentation will be provided by existing subject matter experts to inform the work.

KEY RESPONSIBILITIES

• Apply infrastructure security expertise to identify, assess, and document threats across the Teradata AI Factory appliance — spanning hardware, operating system, networking, storage, identity, and virtualization layers.
• Build out threat model components, data flows, trust boundaries, and modules within IriusRisk, with a particular focus on expanding hardware component coverage where current models are software-centric.
• Work closely with platform architects to understand system architecture, consuming diagrams and documentation to accurately represent components and their security characteristics within the threat modeling tool.
• Coordinate with the engineering security team and corporate security team to align threat model structure, threat libraries, and countermeasure coverage with organizational standards.
• Develop and maintain an overarching threat model for the Teradata AI Factory appliance, integrating hardware and software components into a cohesive and defensible view.
• Identify gaps in existing threat model content and work with subject matter experts to fill them through structured interviews, documentation review, and iterative model refinement.
• Produce clear documentation and status updates to support review cycles and drive threat model artifacts toward approved and released status.

REQUIRED QUALIFICATIONS

• 7+ years of experience in infrastructure or platform security, with demonstrated depth across on-premises or private cloud environments.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

REQUIRED SKILLS

• Infrastructure security — hands-on experience securing on-premises or private cloud environments; depth across two or more of: operating systems, networking, compute and storage hardware, identity/PKI/key management, virtualization, or Kubernetes.
• Threat modeling — practical experience applying structured threat modeling methodology (STRIDE or equivalent) within a dedicated tool such as Irius Risk, Threat Modeler, Microsoft Threat Modeling Tool, or a comparable platform; Irius Risk experience is highly preferred.
• Hardware and software threat assessment — ability to independently assess an architecture and identify where real threats exist across both hardware and software components, not just application-layer concerns
• Cross-team collaboration — comfortable working across architecture, engineering, and security stakeholder groups to gather inputs, align on scope, and drive artifacts forward
• Documentation and communication — able to consume technical architecture materials and translate them into structured threat model constructs; clear written and verbal communication skills

PREFERRED QUALIFICATIONS

• Hands-on experience with IriusRisk, including component library management, revie workflows, and artifact management
• Experience building threat models for appliance-based or tightly integrated hardware and software platforms
• Familiarity with enterprise on-premises data or AI platform environments
• Experience securing virtualization layers, container orchestration platforms, or baremetal infrastructure
• Background in identity, PKI, or secrets management as it applies to infrastructure security
• Experience working within or alongside a corporate security or product security function
• Exposure to security compliance frameworks relevant to enterprise on-premises deployments

WHAT A STRONG CANDIDATE LOOKS LIKE

The ideal candidate leads with infrastructure security depth — someone who can look at a hardware and software architecture and independently identify where the real threats lie across the full stack. Experience with structured threat modeling tools is expected; IriusRisk specifically is learnable for the right candidate. This role requires someone who can engage credibly with platform architects on infrastructure security topics, ask the right questions, and translate that knowledge into rigorous, well-structured threat model artifacts. Strong candidates will be comfortable working within a team-directed structure while taking clear ownership of their individual contributions.

WORK ENVIRONMENT

• This is a fully remote role open to candidates across the United States; PST overlap is preferred. This is a contract engagement. The interview process includes a 30-minute screen with the hiring manager, a 45–60 minute panel with platform and security team members, and a practical discussion focused on infrastructure security experience and threat modelling approach