Cloud Security Engineer

Job Description

Position: Staff Cloud Security Engineer

\n

Salary: $280,000 – $320,000 total compensation

\n

Location: New York, NY (5 days in office)

\n

\n

Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?

\n

\n

This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.

\n

\n

This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale .

\n

\n

What you’ll be doing:

\n

\n
• Design and implement cloud security architecture across GCP (primary) and AWS
\n
• Write and own Terraform at scale, building reusable, secure infrastructure modules
\n
• Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)
\n
• Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)
\n
• Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening
\n
• Design secure platform primitives rather than one-off controls
\n
• Implement logging, monitoring, and detection pipelines for cloud environments
\n
• Lead threat modelling and architecture reviews for new systems
\n
• Act as a technical leader, raising the bar through code reviews and system design
\n

\n

\n

What we’re looking for:

\n

\n
• Strong platform / DevOps engineering background with a security focus
\n
• Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines
\n
• Experience working in GCP (preferred), AWS (acceptable), or Azure (workable)
\n
• Proven track record of building secure cloud infrastructure, not just consuming tools
\n
• Strong understanding of IAM, networking, and distributed systems security
\n
• Ability to operate independently at staff level, owning technical direction
\n
• Comfortable working in high-performance, fast-paced environments
\n

\n

\n

Nice to have:

\n

\n
• Experience with Spacelift or similar IaC orchestration tools
\n
• Familiarity with policy-as-code (OPA, etc.)
\n
• Experience designing multi-account / multi-project cloud architectures
\n
• Background in high-growth startups or infrastructure-heavy environments
\n

\n

\n

What’s in it for you:

\n

\n
• Work on cutting-edge AI infrastructure used by top-tier financial institutions
\n
• Join a high-talent-density team with strong engineering standards
\n
• Real ownership of cloud security strategy and architecture
\n
• Build systems where security is engineered—not enforced
\n
• Excellent benefits, daily meals, and a high-performance environment
\n

\n

\n

View email address on ziprecruiter.com

\n

View phone number on ziprecruiter.com