Cloud Security Engineer

Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?

• Strong platform / DevOps engineering background with a security focus \n

• Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines \n

• Experience working in GCP (preferred), AWS (acceptable), or Azure (workable) \n

• Proven track record of building secure cloud infrastructure, not just consuming tools \n

• Strong understanding of IAM, networking, and distributed systems security \n

• Ability to operate independently at staff level, owning technical direction

This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.

\n

\n

This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale.

\n

\n

What you’ll be doing:

\n \n

• Design and implement cloud security architecture across GCP (primary) and AWS \n

• Write and own Terraform at scale, building reusable, secure infrastructure modules \n

• Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation) \n

• Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first) \n

• Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening \n

• Design secure platform primitives rather than one-off controls \n

• Implement logging, monitoring, and detection pipelines for cloud environments \n

• Lead threat modelling and architecture reviews for new systems \n

• Act as a technical leader, raising the bar through code reviews and system design \n

\n

\n