Security Infrastructure Engineer

Tailscale is a fully distributed company building software that makes secure network access effortless. We are seeking a Security Infrastructure Engineer to join our product security team. In this role, you will design and build security controls across cloud platforms, OS, Kubernetes, networks, and CI/CD, improve the security properties of Tailscale, audit infrastructure for weaknesses, and support engineering decisions with threat modeling and security analysis. You will spend 25-50% of your time writing software.

• Design and build security controls across diverse layers (cloud, OS, Kubernetes, networks, CI/CD)
• Improve security properties by identifying opportunities for security features, bug fixes, and defense-in-depth
• Audit infrastructure for technical security weaknesses and drive mitigations
• Support engineering decisions with threat modeling and security analysis

• Technical expertise in cloud platform security (e.g., AWS), multi-cloud networks, and cloud-agnostic systems
• Familiarity with container security, orchestration security, and authentication/authorization
• Knowledge of internet/web security fundamentals (WAFs, TLS, PKI, DNS)
• Proficiency in at least one programming language (Tailscale uses Go) and Infrastructure as Code (e.g., Terraform, Ansible)
• Prior experience in a safety-related technical role such as infrastructure security, security operations, threat modeling, or incident response
• Knowledge of OS internals and networking protocols

Compensation: The target base salary range for this role is $218,420—$302,840 CAD, plus equity and comprehensive benefits.

Benefits: Equity, retirement contributions with match, health/vision/dental insurance, paid parental leave, flexible PTO, home office setup with internet reimbursement, professional development budget, company retreats, and team offsites.

This is a remote role based in Canada.