Cloud Infrastructure Security Engineer

At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'l have the tools and opportunities to advance your career while creating software that changes the world. As a recognised Subject Matter Expert and senior member of our Security Engineering organization, you will lead the design, delivery, and ownership of security solutions that protect our multi-cloud SaaS environments. Operating at Band 9, you will drive complex, cross-functional security initiatives end-to-end — from threat identification and architectural design through to operationalisation and continuous improvement. You will work directly with the NoSQL Engineering Teams and align closely with CISO-level directives to shape our security posture. You will influence functional strategy, guide and mentor other engineers, and be the go-to technical authority on infrastructure security across the organisation. You will identify, evaluate, and operationalize open-source and third-party security solutions, conducting proof-of-concept assessments and adapting them to DataStax/IBM's business and compliance requirements. You will own and evolve the Security Architecture for our production environments, making strategic recommendations as the threat landscape changes. You will provide on-call support for team-owned components on a rotational basis, and serve as a security advocate and consultant across the broader engineering organization. ·      Expert Security Depth — Network Security, Container Security, Authentication, Encryption, and IAM: Recognized SME-level expertise across multiple security domains. Drives security architecture decisions with broad organizational impact, applying deep knowledge to design and deliver solutions that raise the security bar across our cloud environments. ·      Multi-Cloud Security Leadership: Proven track record of securing large-scale workloads across AWS, GCP, and/or Azure. Multi-cloud experience strongly preferred. Leads cross-functional teams to establish and evolve cloud security standards and controls at the organizational level. ·      Kubernetes & Container Security at Scale: Expert-level knowledge of Kubernetes clusters in production cloud environments — security configurations, hardening, policy enforcement, and runtime protection. Drives adoption of security best practices across engineering teams. ·      Infrastructure as Code & Secure Engineering Practices: Strong coding skills in scripting and systems languages (Bash, Python, Golang, or equivalent) and Infrastructure as Code tooling (Terraform or equivalent). Applies engineering rigor to security automation and tooling, raising efficiency across the team. ·      Distributed Systems & Microservices Security: Solid understanding of large-scale distributed systems and microservices architectures. Identifies and addresses security risks at the architectural level, influencing design decisions across multiple product and engineering teams. ·      Incident Response & Compliance Leadership: Leads security incident response efforts, conducts post-incident analysis, and drives systemic improvements to reduce recurrence. Experienced in compliance and auditing practices, contributing to or leading compliance strategy aligned with organizational and regulatory requirements. End-to-End Ownership & Cross-Functional Influence: Demonstrated history of taking full ownership of security domains — from strategy through execution and influencing outcomes beyond immediate team boundaries, including across product, platform, and infrastructure engineering organizations. CISO Alignment & Security Strategy Execution: Experience translating CISO-level security directives and organizational security strategy into concrete engineering programmes and measurable outcomes. Able to act as a bridge between executive security vision and hands-on engineering delivery. Security Architecture Reviews Across Business Units: Track record of leading or contributing to security architecture reviews and threat modeling across multiple product lines or business units, elevating security standards at an organizational level. United Kingdom Security Remote Professional London, GB London (8660) IBM United Kingdom Limited Amazon Web Services Architecture Auditing Automation Bar Bourne-again Shell Bridge Concrete Design Distributed Systems Engineering History Incident Response Infrastructure Leadership Network Security Protection Python Regulatory Requirements Scripting Security Strategy Azure Google Cloud Platform Strategy Execution Encryption Kubernetes Microservices Coding Golang Terraform Influencing Infrastructure as Code Cloud security Compliance Rigor Infrastructure Security Threat Modeling Efficiency Authentication Hardening Scale Multi-cloud Computing Directives Amazon Web Services Identity and Access Management Container Security Microservices Security Tooling