About this role
About us
At Koltin, we're redesigning the way we care for our moms, dads, and grandparents to help them remain healthy and independent for as long as possible. How do we do it? Through our health memberships, which provide personalized, preventive care to support our members' long-term well-being. We are the first company in Mexico offering health memberships that include major medical insurance coverage for older adults, up to 84 years old, backed by BBVA Seguros Salud.
About the role
We're looking for a Senior Infrastructure and Security Engineer to join our Platforms team and keep the infrastructure that serves thousands of older adults across Mexico secure. We handle health and insurance data, so security is part of how we build, not a layer added at the end. You'll work hands-on in our cloud and Kubernetes platform and turn security requirements into code.
What you'll do
- You will own the security of our cloud foundation, including identity and least privilege, audit logging, encryption, and network boundaries, following every security finding through to a fix. You will own how people and workloads access our systems, including single sign-on, short-lived credentials, and access that follows each person's role. You will keep our infrastructure as code and delivery pipelines secure by default, with guardrails and automated checks built into how we ship. You will lead incident response, from runbooks and detection to post-incident reviews that leave the platform stronger. You will turn requirements from audits, pentests, and partners into automated controls and evidence instead of manual checklists. You will partner with our IT team to apply the same security-as-code approach to corporate identity, devices, and endpoints.
You're a good fit if you:
- Identify with our Eng Values. Treat security as engineering: you design controls, prove they work and automate them. Prefer a reviewed pull request to a console click. Explain risk in plain terms and help engineers ship safely instead of blocking them. Lead the debugging of difficult production issues with calm and focus. Identify with the T-shaped model: generalists with a strong suit in one area. We are all engineers at our core, no matter our specialization.
Had experience with:
- Fiveish years running production infrastructure on a major cloud provider with infrastructure as code. Designing identity and least-privilege access in production. Audit logging, detection and incident response, including at least one security incident you helped handle. Kubernetes or a comparable container platform in production, with CI/CD. Linux, networking and DNS fundamentals. Scripting and tooling in Python, Go or Bash. Fluent Spanish and good working English.
Bonus points if you have:
- Owned controls in a compliance audit (ISO 27001, SOC 2, PCI). Worked in a regulated industry: fintech, insurance or health. Worked with identity and device management (SSO, SAML/OIDC, MDM). Knowledge of our stack (AWS, Terraform, Kubernetes and GitOps) is a plus.
Key outcomes:
- Owns the security posture of our platform end to end: knows where the biggest risks are, prioritizes them and closes them, without waiting to be asked. Makes the secure path the easy path: the default way to build and deploy is also the safe one. Turns every incident, finding and audit request into a lasting improvement rather than a one-off fix. Scopes security work into phases and deliverables, balancing risk, cost and delivery speed, and explains the tradeoffs to the team and leadership. Raises the security bar of every engineer through reviews, documentation and pairing.
Location
Based in Mexico City, with a mix of remote work and time at our CDMX office.
Being aware that some groups don't apply even if they are qualified, this is a reminder to apply even if you think that you don't tick all the boxes!