Security Engineer/Architect

Title: Infrastructure Security Engineer Location: New York & San Jose - Hybrid
About VLink: Started in 2006 and headquartered in Connecticut, VLink is one of the fastest growing digital technology services and consulting companies. Since its inception, our innovative team members have been solving the most complex business, and IT challenges of our global clients.
Special Note: Must be fluent in Mandarin speaking and written skills.
Technical Requirements:

• Own security architecture and control frameworks across self-built data centers, OCI, AWS, Azure, and Google Cloud Platform in hybrid/multi-cloud environments.
• Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM for infrastructure.
• Lead threat modeling and architecture reviews to identify and mitigate risks before production.
• Embed automated security scanning, policy-as-code, and approval gates into CI/CD pipelines.
• Build scalable IaC frameworks to enforce security baselines and eliminate configuration drift.
• Partner with engineering, infrastructure, and business teams to shift security left in the design lifecycle.
• Drive control maturity through regular assessments and a roadmap focused on automation and operational efficiency.
• Design and mature cloud network security controls - including VPC architecture, micro segmentation, and firewall policies, and establish centralized security logging and audit trail coverage.

Soft Skills & Expectations:
Ability to integrate into fast-paced teams
Strong communication skills
Capable of working autonomously under Client supervision
Able to support incident investigations and root cause analysis

Employment Practices:
EEO, ADA, FMLA Compliant
VLink is an equal opportunity employer committed to fostering an inclusive environment where diversity is celebrated. All qualified applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Employment is contingent upon successful completion of a background check. Applicant information will be handled in accordance with VLink's privacy policy.