Senior Cloud Security Engineer

Responsibilities

• Build security tooling, automation, and services for cloud security—implementing secure patterns that engineering teams can adopt
• Implement security best practices and provide technical input on cloud security, IAM architecture, network security, and infrastructure-as-code
• Implement and maintain security controls that strengthen the security posture of our cloud environments across Azure and AWS
• Operate and maintain PKI infrastructure for cloud environments—including private CA hierarchies (AWS Private CA, AD CS), certificate lifecycle management, mTLS for service-to-service authentication, and load balancer certificate management
• Operate and maintain HashiCorp Vault as the central secrets management platform—including Vault PKI engine, dynamic secrets, authentication methods, and policy management
• Partner with Kubernetes Security Engineer to implement unified PKI infrastructure across cloud and container environments, providing input on design decisions
• Collaborate on K8s IAM integration, network policies, node security, and CSI driver security
• Design and troubleshoot multi-account and multi-VPC network topologies—diagnosing connectivity issues and security group misconfigurations across cloud environments
• Build automation and tooling to enforce security policies, detect misconfigurations, and respond to threats in cloud environments
• Execute cloud security posture management (CSPM), threat detection, and incident response projects
• Implement security improvements to infrastructure-as-code, CI/CD pipelines, and deployment processes
• Partner with engineering teams to implement secure cloud architectures for new capabilities and workloads
• Build security testing tools, CLI utilities, and dashboards to continuously validate security controls
• Solve complex security challenges in multi-cloud environments
• Leverage AI tools to accelerate development and automate security workflows

Qualifications

• Active security clearance or ability to obtain and maintain a security clearance
• Experience securing production cloud environments at scale, with strong understanding of cloud security models, attack patterns, and defensive strategies across Azure and AWS
• Strong software development skills in Python (preferred) and/or Go with experience building security tooling and automation
• Strong software engineering fundamentals: comfortable with data structures, algorithms, API design, debugging production systems, and working across multiple languages
• Terraform skills including module design and infrastructure-as-code security best practices
• Strong experience with cloud networking and troubleshooting across AWS and Azure: VPCs/VNets, subnets, NACLs/NSGs, Security Groups, Transit Gateways/Virtual WAN, VPC peering, route tables, and VPN/ExpressConnect—you can debug "why can't X talk to Y" across multi-account/multi-subscription network topologies
• Hands-on experience with cloud security tools (CSPM, CWPP, SIEM) and infrastructure-as-code security (Terraform, CloudFormation)
• Strong knowledge of IAM, encryption, logging/monitoring, and cloud-native security patterns
• DevSecOps mindset with experience embedding security into development and operations workflows
• Proven ability to assess risk, prioritize work, and execute complex security projects
• Comfortable diving into unfamiliar codebases and leveraging AI to bridge knowledge gaps
• Strong communication skills and ability to collaborate effectively across teams