Remote job
Engineering Manager II, Cloud Security
Job details
About this role
Role overview
Lead a cloud security function responsible for protecting production infrastructure and the sensitive data it handles. This is a player-coach role: you will set technical direction, build the team, and contribute directly to architecture and implementation across cloud accounts, Kubernetes, identity, delivery systems, and security monitoring.
Responsibilities - Hire, coach, and set priorities for cloud security engineers; deliver against the team roadmap. - Define security standards for cloud account structure, network boundaries, encryption, and Kubernetes workload isolation. - Improve production access controls for people and services, including single sign-on, least-privilege roles, temporary access, and secrets management. - Establish code-based safeguards, such as organization policies, deployment checks, admission controls, and reusable infrastructure modules. - Develop cloud posture checks and detection capabilities, and lead the cloud infrastructure side of incident response with partner teams. - Secure build and deployment systems, and represent cloud security in technical reviews and customer or compliance discussions.
Requirements - At least seven years in security, infrastructure, or platform engineering on production cloud systems, including two or more years leading or managing engineers. - Deep practical knowledge of cloud security, especially AWS identity and organization controls, network design, encryption, and logging. - Experience securing Kubernetes workloads, including access controls, network policies, admission controls, workload identity, and container images. - Fluency with Terraform or similar infrastructure-as-code tools and a record of delivering safeguards that engineering teams adopt. - Experience building or scaling a cloud security program, with measurable improvements to exposure or detection time. - Strong written communication for architecture standards, incident reviews, and concise risk updates.
Nice to have
Experience in a regulated or high-liability industry, cloud detection or incident response, or applying language models and agents to security workflows.
Benefits and work setup
The organization describes itself as remote-first and offers health coverage, retirement savings, commuter support, professional development, parental leave, and flexible time off.