Sr. Azure Infrastructure Security Engineer

• Contract length: 3-6 months
• Expected weekly hours: 20 (minimum) - 40 (maximum)
  
  At Mesh, our mission is to enable consumers to pay and be paid with any asset. Today, trillions of dollars in tokenized assets exist but remain largely unusable for everyday commerce. Mesh is bridging this gap by making crypto payments reliable, useful, and ubiquitous. We combine a powerful orchestration engine with a seamless consumer app to unlock liquidity for the world. Backed by leading investors like PayPal Ventures, Paradigm, and Galaxy Ventures, we are building the infrastructure for the next era of the global economy. Join us!

Overview

This is not a traditional SOC, GRC, or cloud security monitoring role.

We're looking for an experienced infrastructure engineer who has evolved into security engineering—someone who has personally built and secured production Azure environments, not simply monitored or audited them.

You'll own the implementation of security directly within our Azure platform, designing secure infrastructure from the edge through Kubernetes, networking, identity, and application workloads. You'll work closely with Infrastructure and Product Security to build security into the platform rather than layering it on afterward.

This is not a traditional SOC, GRC, or security monitoring role. We're looking for an engineer who has grown from Infrastructure/DevOps into Security, with hands-on experience building secure Azure platforms in production.

You'll own the implementation of security across our Azure infrastructure, focusing on AKS, Cloudflare, networking, identity, and Infrastructure as Code. You'll build security directly into the platform—not review systems built by others.

What You'll Do

• Design and secure Azure infrastructure using Infrastructure as Code.
• Implement and secure AKS, networking, identity, and container workloads.
• Manage Cloudflare (WAF, DNS, CDN, Zero Trust) and edge security.
• Build secure CI/CD pipelines with integrated security controls.
• Implement Entra ID, RBAC, Managed Identities, and Zero Trust principles.
• Improve Kubernetes security, secrets management, and workload identity.
• Partner with engineering teams to build secure, scalable infrastructure.

Required Experience

• Hands-on production experience with Azure, including:
• • AKS
  • Networking
  • Microsoft Entra ID
  • RBAC & Managed Identities
  • Azure Front Door/Application Gateway
• Production experience implementing Cloudflare (or Fastly/Imperva) WAF and edge security.
• Strong Infrastructure as Code experience (Terraform, Terragrunt, Bicep, etc.).
• Kubernetes security, networking, ingress, and workload identity.
• DevSecOps and CI/CD security experience.
• Python or another scripting language.