Senior Cloud Security Engineer

About this role

# Senior Cloud Security Engineer

## The Role

We're hiring a Senior Cloud Security Engineer to make our cloud environments secure by default. You'll design and build the guardrails, automation, and detection that keep our infrastructure defensible across multiple cloud providers.

You'll do it with a DevOps mindset: writing code, shipping changes through the same pipelines our engineers use, and building paved roads teams want to adopt, rather than handing down policy from the outside.

This role partners closely with platform and infrastructure engineering, customer support, and delivery teams, as well as IT and compliance.

## What You'll Do

• Own the security posture of our cloud environments across Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure, applying consistent controls across providers.
• Design secure reference architectures and reusable patterns — account and project structure, network segmentation, encryption and key management, secrets management — that teams can adopt instead of reinventing.
• Build security into Infrastructure as Code (IaC) through hardened modules, policy as code, and pre-deploy checks, so misconfigurations are caught before they reach production.
• Secure Continuous Integration / Continuous Delivery (CI/CD) pipelines and the software supply chain: pipeline permissions, secrets handling, artifact integrity, and short-lived workload identity in place of long-lived keys.
• Design and enforce least-privilege Identity and Access Management (IAM) across clouds, including role design, federation with our identity provider, and periodic access reviews.
• Write code and scripts to automate security controls, remediation, and evidence collection — if you do something twice, you automate it the third time.
• Operate and tune Cloud Security Posture Management (CSPM) and cloud-native security services, and drive findings through to remediation with owning teams.
• Build logging and detection for cloud c...