About us
At Koltin, we're redesigning the way we care for our moms, dads, and grandparents to help them remain healthy and independent for as long as possible.
How do we do it? Through our health memberships, which provide personalized, preventive care to support our members' long-term well-being.
We are the first company in Mexico offering health memberships that include major medical insurance coverage for older adults, up to 84 years old, backed by BBVA Seguros Salud.
About the role
We're looking for a Senior Infrastructure & Security Engineer to join our Platforms team and keep the infrastructure that serves thousands of older adults across Mexico secure.
We handle health and insurance data, so security is part of how we build, not a layer added at the end. You'll work hands-on in our cloud and Kubernetes platform and turn security requirements into code.
What you'll do:
- Own the security of our cloud foundation: identity and least privilege, audit logging, encryption and network boundaries, following every security finding through to a fix.
- Own how people and workloads access our systems: single sign-on, short-lived credentials and access that follows each person's role.
- Keep our infrastructure as code and delivery pipelines secure by default, with guardrails and automated checks built into how we ship.
- Lead incident response, from runbooks and detection to post-incident reviews that leave the platform stronger.
- Turn requirements from audits, pentests and partners into automated controls and evidence instead of manual checklists.
- Partner with our IT team to apply the same security-as-code approach to corporate identity, devices and endpoints.
You're a good fit if you:
- Identify with our Eng Values.
- Treat security as engineering: you design controls, prove they work and automate them.
- Prefer a reviewed pull request to a console click.
- Explain risk in plain terms and help engineers ship safely instead of blocking them.
- Lead the debugging of difficult production issues with calm and focus.
- Identify with the T-shaped model: generalists with a strong suit in one area. We are all engineers at our core, no matter our specialization.
Had experience with:
- Fiveish years running production infrastructure on a major cloud provider with infrastructure as code.
- Designing identity and least-privilege access in production.
- Audit logging, detection and incident response, including at least one security incident you helped handle.
- Kubernetes or a comparable container platform in production, with CI/CD.
- Linux, networking and DNS fundamentals.
- Scripting and tooling in Python, Go or Bash.
- Fluent Spanish and good working English.
- Bonus points if you have:
- Owned controls in a compliance audit (ISO 27001, SOC 2, PCI).
- Worked in a regulated industry: fintech, insurance or health.
- Worked with identity and device management (SSO, SAML/OIDC, MDM).
- Knowledge of our stack (it's not a requirement, just a bonus): AWS, Terraform, Kubernetes and GitOps.
Key Outcomes:
- Owns the security posture of our platform end to end: knows where the biggest risks are, prioritizes them and closes them, without waiting to be asked.
- Makes the secure path the easy path: the default way to build and deploy is also the safe one.
- Turns every incident, finding and audit request into a lasting improvement rather than a one-off fix.
- Scopes security work into phases and deliverables, balancing risk, cost and delivery speed, and explains the tradeoffs to the team and leadership.
- Raises the security bar of every engineer through reviews, documentation and pairing.
How we hire:
Note: there might be a couple more steps in between if we see the need.
- Initial conversation with a recruiter: an intro call to get to know you, understand your background, and share more about the role and our company.
- Conversation with the hiring manager: your experience in infrastructure and security, and what you're looking for.
- Technical session: a real-world scenario on cloud infrastructure, infrastructure as code and access control, plus a walk-through of an incident you were part of.
- Discussion with engineering leadership: a chance to explore your technical depth, decision-making and collaboration style.
- Follow-up with engineering team members: informal, peer-level conversations to get a feel for what working together would look like.
- Final chat with one of our founders: we'll close the loop with a conversation about vision, culture and long-term fit.
Location
Based in Mexico City, with a mix of remote work and time at our CDMX office.
Being aware that some groups don't apply even if they are qualified, this is a reminder to apply even if you think that you don't tick all the boxes!
