> Markdown version of [/jobs/ext/3693205-cloud-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/3693205-cloud-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Infrastructure Security Engineer

- **Company:** Flexport
- **Location:** Amsterdam, Netherlands (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Code Review, Computer Networks, Continuous Integration, Identity and Access Management, Python (Programming Language), Key Management, Network Segmentation, Scripting, Istio, Multi-Cloud, Kubernetes, Data Management, Terraform
- **Published:** October 12, 2026
- **Apply:** https://job-boards.greenhouse.io/flexport/jobs/8258468

## About the Role

* Typically 5-8 years of experience in cloud, infrastructure, or platform security engineering, including hands-on AWS and Kubernetes work - we care more about what you've built than the exact number. If you meet most of this, apply.
 * Proficiency in at least one compiled language (Go or similar) and one scripting language (Python or similar).
 * Experience with infrastructure-as-code (Terraform or similar) and a GitOps delivery model - changes shipped through code review, not tickets and manual steps.
 * Working knowledge of IAM and least-privilege design across cloud and container environments., * Experience with cloud security posture tooling (Wiz, Orca, Prisma, or similar) as a signal source rather than an end in itself.
 * Software supply-chain security experience (SLSA, artifact signing, provenance).
 * Familiarity with EU data-residency and cross-border data-handling considerations.
 * Multi-cloud experience.

## Description

* Design and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns for new services.
 * Fix the Terraform module, not the finding - drive remediation-at-source so misconfigurations get closed at the pattern level, not one ticket at a time.

Kubernetes & workload security

 * Harden our Kubernetes platform: pod security, service mesh and network policy, secrets management, and supply-chain controls (image provenance and signing).
 * Partner with platform engineers so new services inherit secure defaults instead of requesting them after the fact.

Policy & automation

 * Build and maintain policy-as-code and IaC scanning that block risky patterns in CI.
 * Write real code - Go or Python, shipped through the same CI/CD the rest of engineering uses.

Partnership

 * Act as the local technical voice on cloud and infrastructure security for our Amsterdam engineering teams, and partner closely with the US-based cloud security team.