Senior Production Support Engineer
InformaticaBase Salary
$149k - $224k/yr
Responsibilities
- Implement and maintain FedRAMP security controls mapped to NIST SP 800-53.
- Engineer AWS network security architecture, including VPC design, segmentation, security groups, NACLs, Transit Gateway, PrivateLink, WAF, and egress controls.
- Design and improve identity and access management using IdP integration, SSO, SAML, OIDC, OAuth, IAM, privileged access controls, secrets management, and KMS.
- Build and maintain Terraform infrastructure-as-code modules, secure defaults, policy-as-code, and automated guardrails.
- Harden Linux systems, containers, and Kubernetes workloads.
- Perform vulnerability remediation, POA&M tracking, continuous monitoring, and audit evidence collection.
- Automate control validation and evidence gathering.
- Partner with Engineering, SRE, and Compliance to embed security into development and deployment pipelines.
- Contribute to incident response, detection engineering, logging, SIEM integration, and alerting.
- Document architectures, conduct architecture reviews, and mentor other engineers.
Requirements
- At least 5 years of experience in security engineering, cloud security, or infrastructure security.
- Experience implementing security controls in a FedRAMP environment or an equivalent framework such as NIST 800-53, NIST 800-171, or CMMC.
- Strong knowledge of NIST security controls, control families, baselines, and technical mappings.
- Strong hands-on Terraform skills, including module design, state management, and CI/CD-driven deployments.
- Deep AWS network security experience with VPC, Transit Gateway, security groups, WAF, GuardDuty, Security Hub, Config, and CloudTrail.
- Hands-on identity engineering experience with identity providers, SAML, OIDC, OAuth 2.0, LDAP, Kerberos, AWS IAM, and KMS.
- Strong understanding of TLS and PKI, including certificate lifecycle management and secure protocol configuration.
- Strong Linux and container experience.
- Proficiency in Python, Go, or Bash.
- Strong written and verbal communication skills, including working with auditors and engineering teams.
- U.S. citizenship and ability to work from the U.S. are required for access to the FedRAMP environment.
- Willingness to complete additional screening or background checks.
- Preferred qualifications include AI-assisted engineering experience, FedRAMP authorization or assessment support, Kubernetes security at scale, vulnerability management, FIPS 140-2/140-3 cryptography, AWS GovCloud, FedRAMP 20x, OSCAL, CISA directives, DISA STIGs, policy-as-code tools, software supply chain security, and certifications such as AWS Security Specialty, CKS, or CCSP.
Benefits
- Salesforce offers time-off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The position is based in the U.S. and requires the ability to work from the U.S.; additional screening or background checks may be required.
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com