> Markdown version of [/jobs/ext/3869045-staff-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/3869045-staff-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Cloud Security Engineer

- **Company:** Typeface Inc.
- **Location:** Palo Alto, CA, United States
- **Experience:** Expert
- **Salary:** $210,000.0 - $240,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing Security, Encodings, Cyber Security, Information Systems, Computer Programming, Continuous Integration, Identity and Access Management, Python (Programming Language), Key Management, Network Security, Policy as Code, Scripting, Cloud Platform System, Generative AI, Cloudformation, Build Management, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Bicep, Terraform, Docker
- **Published:** October 22, 2026
- **Apply:** https://startup.jobs/staff-cloud-security-engineer-typeface-10522391

## About the Role

* 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record of securing production environments at scale
 * Bachelor's or Master's degree in computer science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
 * Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services
 * Experience with infrastructure as code (Terraform, CloudFormation, or Bicep) and container security (Docker, Kubernetes)
 * Strong understanding of IAM, network security, encryption, key management, and secrets management
 * Scripting or programming skills (Python, Go, or Bash) to automate security controls
 * Excellent communication skills and the ability to thrive independently and in collaborative teams
 * Experience supporting B2B or enterprise SaaS products
 * Bonus: Background securing AI or generative AI systems
 * Bonus: Industry certifications such as AWS Certified Security - Specialty, CCSP, or CISSP

## Description

* Lead the design and implementation of security architecture across our cloud environments - from identity and networking to data protection and workload security
 * Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks
 * Own identity and access management, applying least-privilege principles across accounts, services, and users
 * Secure containers, Kubernetes, and CI/CD pipelines, embedding security into how our teams build and deploy
 * Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution
 * Collaborate closely with Engineering, Product, IT and Compliance partners to support security reviews, audits, and certifications such as SOC 2 and ISO 27001
 * Partner with incident response to investigate and remediate cloud security events
 * Mentor and support teammates, helping to shape a strong, security-first engineering culture