Senior Security Infrastructure Engineer

Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Our vision: A world where everyone is free to focus on their most purposeful work, together. This remote position is open to residents of Czechia About the Role: Wrike’s Security team is the frontline defense ensuring the integrity and credibility of the data stored within our platform. In this senior position, you will own and evolve the security posture for Wrike’s production, Kubernetes, and GCP environments. You aren't just maintaining systems; you are architecting a "secure by default" infrastructure that allows our engineering and other teams to move fast without compromising safety. Your Impact: Own and evolve security for Wrike's production and cloud (Azure permissions & configurations and GCP) environments, with a strong focus on network and infrastructure security. Design, implement, and improve security controls — network segmentation, WAF and IDS/IPS operations, hardening, IAM, SSO, and logging — across our fleet. Partner with System & Data Engineering, and other ops teams to embed security into architecture and change management (design reviews, sign-offs, "secure by default" patterns). Educate and coach engineers and operations teams on security practices through reviews, consultations, and targeted training. Identify, follow up on, and determine mitigation strategies for security risks. Your Qualifications: Being a security subject-matter expert, guide engineering teams in end-to-end secure system design and implementation, with a focus on network architecture and cloud services and their associated components. Hands-on experience designing network segmentation/architecture and operating firewall / IDS-IPS platforms in production. Performing cloud infrastructure reviews from a security perspective; primary focus is on Azure permissions and configuration, with working knowledge of GCP and on-prem components. Identifying gaps in existing network and cloud security architecture/configuration, and recommending changes or enhancements (authentication, authorization, network segmentation, bastion host setup, etc.). Lead the technical direction and architecture of our cyber security defense capabilities, including enterprise security posture management.