Principal Cloud Security Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Develop and enhance security baselines for cloud infrastructure, container platforms, platform tools, and third-party services.

• Establish least-privilege strategies for cloud identities, service accounts, platform access models, and containerized workloads.

• Oversee security governance across build and deployment environments.

• Assess network segmentation, cloud connectivity, workload isolation, and architectural decisions of the platform.

• Generate security posture reports and interpret technical findings in a business context.

• Create reference architectures, engineering standards, and decision documentation.

• Collaborate with DevOps, Site Reliability Engineering, and Platform Engineering teams.

• Integrate security expertise into architecture evaluations, operational planning, and strategic initiatives.

• Influence platform security practices within Pax8’s cloud marketplace.

⛳️ Requirements

• Significant experience in securing contemporary cloud and infrastructure platforms.

• Extensive practical knowledge of Amazon Web Services, including identity, networking, encryption, logging, secrets management, containers, and data services.

• Proven track record in developing security standards, architectural guidance, and governance frameworks.

• Ability to sway technical decisions without having formal reporting authority.

• Advanced understanding of Kubernetes security, workload isolation, access controls, network controls, and container governance.

• Strong grasp of software delivery security, platform automation, and modern deployment pipelines.

• Hands-on experience in reviewing infrastructure as code and integrating security measures into engineering workflows.

• Experience in evaluating SaaS and platform technologies through threat modeling and security architecture assessments.

• Familiarity with cloud security posture management and platform governance tools.

• Awareness of security implications for emerging AI and agent-based workloads.

• Experience working in multi-tenant environments where scalability, availability, and data isolation are paramount.

• Capacity to balance practicality and risk management while advising engineering teams.

• Must possess valid work authorization in the USA or Canada.

• Successful applicants must undergo pre-employment checks, including ID verification, references, and qualification assessments.

🏝️ Benefits

• 401(k) with company matching.

• Comprehensive medical, dental, and vision coverage.

• Employee Assistance Program (EAP).

• Employer-sponsored life, AD&D, short-term disability, and long-term disability insurance.

• Flexible open paid time off (PTO).

• Paid sick leave.

• Paid parental leave.

• RTD EcoPass for eligible employees based in Colorado.

• Internal development hub.

• Access to learning and development trainers.

• AI-powered tools.

• Mentorship opportunities.

• Collaboration across continents.

• Opportunities for career advancement.