Senior Cloud Security Engineer

Role overview As a Senior Cloud Security Engineer, you’ll make cloud infrastructure secure by default across multiple providers. You’ll build practical guardrails, automation, and monitoring in partnership with platform and infrastructure teams, integrating security into the tools and workflows engineers already use.

Responsibilities - Assess and improve security across cloud accounts, projects, identities, networks, and sensitive data stores; prioritize risks and coordinate remediation. - Develop reusable secure architecture patterns for account structure, network boundaries, encryption, key and secrets management, and access control. - Embed security checks in infrastructure code and delivery pipelines, including controls for permissions, credentials, artifact integrity, and workload identity. - Automate security controls, remediation, and evidence collection; operate posture management and cloud-native security services. - Establish centralized logging and detection for cloud activity, and lead cloud-related incident response. - Support compliance programs by implementing controls and collecting evidence.

Requirements - Production infrastructure and delivery pipeline experience from a DevOps, SRE, or platform engineering role. - Hands-on security experience with at least two major cloud providers, including their identity, networking, and logging models. - Strong knowledge of cloud security practices such as least-privilege access, workload identity, segmentation, encryption, secrets management, logging, and preventive policies. - Practical experience with infrastructure as code and integrating security checks into it. - Ability to write maintainable automation in a general-purpose language such as Python or Go, as well as shell scripts. - Clear communication skills and ability to explain risks in ways engineering teams can act on.

Nice to have - Familiarity with cloud security assessment, scanning, policy-as-code, or runtime detection tools. - Kubernetes or container security experience, including admission controls or runtime policies. - Relevant cloud security certification, compliance program experience, or cloud incident response and forensics work. - Experience securing SaaS or developer platforms.

Benefits and work setup Remote role based in North America.