Engineering Manager II, Cloud Security

Role overview Lead the development of a cloud security function that protects production infrastructure and sensitive data. This player-coach role sets security direction across AWS, Kubernetes, production access, deployment systems, and detection, while staying hands-on with designs and implementation. You will build the team and work closely with infrastructure, application security, reliability, and compliance partners.

Responsibilities - Hire, coach, and set goals for cloud security engineers; own the team roadmap and delivery. - Define security standards for cloud accounts, network boundaries, encryption, and Kubernetes workloads. - Improve least-privilege access for people and services, including single sign-on, role design, temporary access, and secrets handling. - Deliver code-based safeguards such as cloud organization policies, deployment checks, admission controls, and reusable infrastructure modules. - Build cloud and container posture checks, prioritize findings, and drive remediation. - Develop cloud detection and incident response practices with reliability partners; protect CI/CD systems and contribute to audits and customer reviews.

Requirements - At least seven years in security, infrastructure, or platform engineering for production cloud systems, including two or more years leading engineers. - Strong practical AWS security experience, including identity and access, organization controls, network design, encryption, and logging. - Production Kubernetes security knowledge, including access controls, network policies, admission controls, workload identity, and image hygiene. - Fluency with Terraform or similar infrastructure-as-code tools, and a track record of shipping safeguards that engineers use. - Experience building or scaling a cloud security function and communicating architecture, incidents, and risk clearly. - Ability to measure security impact through reduced exposure and faster detection.

Nice to have - Experience in a regulated or high-liability industry, cloud detection engineering or incident forensics, or applying language models and agents to security workflows.

Benefits and work setup - Remote-first work environment. The cloud estate is primarily AWS, with some Azure and limited GCP; the role also uses Kubernetes, Terraform, Go, and internal security telemetry tooling.