> Markdown version of [/jobs/ext/469509-staff-cloud-security-engineer-new](https://www.wearedevelopers.com/jobs/ext/469509-staff-cloud-security-engineer-new). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff Cloud Security Engineer New - **Company:** Temporal Technologies Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $225,000.0 - $275,000.0 - **Contract:** Temporary contract - **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Applications Architecture, Software System Penetration Testing, Microsoft Azure, Client Server Models, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Codecs, Cyber Security, Information Leak Prevention, Distributed Systems, Python (Programming Language), Key Management, Open Source Technology, Role-Based Access Control, Software Engineering, SSL Certificate Management, Google Cloud, Istio, Software Security, Multi-Cloud, Information Technology, Hashicorp, CIS Benchmarks, Vulnerability Analysis, Programming Languages - **Published:** June 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=77702bfa8bc7e348 ## About the Role Do you have experience in gRPC?, Do you have a Bachelor's degree?, * Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience). * 5+ years in cloud security or a related role. * Proven partnership with engineering teams, bringing security expertise to infrastructure access and security posture. * Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control. * Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention. * Strong opinions on the use of AI in different areas (assessments, threat models, penetration testing, etc). * A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages * Experience with secrets management at scale (e.g. HashiCorp Vault, AWS Secrets Manager) and payload encryption patterns such as codec servers for protecting sensitive workflow data. * Proficiency in Go; familiarity with Python. Go is Temporal's primary server and SDK language. * Strong command of gRPC security, mTLS, and service mesh architectures (Istio, Envoy). * Excellent communication and ability to explain complex security concepts to non-technical stakeholders. * Excellent collaboration and communication skills., * Prior experience with Temporal, Cadence, or similar workflow orchestration platforms and an understanding of workflow history, replay semantics, and scheduling internals. * FedRAMP, SOC 2 Type II, or ISO 27001 experience, particularly in the context of cloud-native SaaS. * Open Source automation or automation projects. * Expertise in other areas of security (AppSec, CorpSec, GRC) * Security conference talks or published research. ## Description Join our dynamic team as a Staff Cloud Security Engineer, where you'll play a pivotal role in securing the Temporal cloud environment for our customers. In this position, you'll work closely with our infrastructure teams, software engineering teams, and customers to build security deeply into our platform across multiple clouds. You'll also help shape how we use AI responsibly in both our infrastructure and our engineering processes. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization., * Collaborate with product and engineering teams to integrate security principles into the design and architecture of cloud infrastructure across multiple clouds (AWS, GCP, Azure, and others). * Secure Temporal's core platform components, including the workflow engine, task queue architecture, and worker execution model - identifying attack surfaces unique to durable, stateful distributed systems. * Conduct threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across our multi-cloud environment, with particular focus on workflow execution, task queue integrity, and client-server trust boundaries. * Secure Temporal's gRPC-based communication layer, including mTLS certificate management, service mesh configuration, and API authentication. * Manage cloud security posture using tools such as Wiz, including misconfiguration detection, compliance monitoring, and remediation across all three cloud providers. * Stay current on emerging cloud security standards and guidance (e.g. CSA Cloud Controls Matrix, CIS Benchmarks) and translate these into actionable internal policy. * Able to participate in on-call rotation. ## Related Videos - [Securing Secrets in the GitOps era](https://www.wearedevelopers.com/videos/546-securing-secrets-in-the-gitops-era) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Can You Touch the Internet? A Journey in Remote Touch With Edge Computing and Haptic Coding](https://www.wearedevelopers.com/videos/1463-can-you-touch-the-internet-a-journey-in-remote-touch-with-edge-computing-and-haptic-coding) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)