Staff Cloud Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Take ownership of Jane’s cloud security architecture, encompassing network control audits, egress hardening, workload identity, and guardrails for secrets management.

• Enhance EKS through network segmentation, CIS benchmark hardening, and admission policies.

• Transform Wiz runtime findings into enforced policy blocks.

• Manage the container supply chain and CI security, which includes signing, provenance, SBOM coverage, GitHub rulesets, mandatory workflows, OIDC-only cloud access, and runner isolation.

• Establish zero-trust non-human identity and fortified runtimes for agentic workloads.

• Act as the Security representative in Cloud Engineering, Infrastructure & Enablement, and Jane AI design reviews.

• Define medium-term technical strategy and create design documents and decision records.

• Mentor Platform Security engineers and security champions.

• Assist in the hiring process and share the on-call rotation responsibilities.

• Report directly to the Platform Security Manager and collaborate closely with Product Security.

⛳️ Requirements

• A minimum of 7 years in security or platform engineering.

• Proven experience in managing the security architecture of a multi-cloud environment.

• Proficient in IAM, networking, compute, and storage.

• Skilled in reading and writing Terraform.

• Hands-on experience with Kubernetes security, including RBAC, network policy, admission controllers, runtime detection, and benchmark hardening.

• Experience in operationalizing a CNAPP such as Wiz or Prisma Cloud.

• Familiarity with software supply chain and CI/CD security at an organizational level.

• Knowledge of image pipelines, signing and provenance, SBOM programs, and GitHub Actions security.

• Software development expertise in Python, Go, Ruby, or TypeScript.

• Demonstrated history of cross-team design authority.

• Experience in writing design documents and decision records.

• Proven ability to mentor engineers.

• Must currently reside in Canada and possess the legal right to work there without employer sponsorship.

• No relocation, visa sponsorship, or third-party/employer-of-record assistance is available.

🏝️ Benefits

• Annual salary range of $158,400 to $247,500.

• Regular career development discussions with your manager.

• Growth in compensation based on experience and significant contributions.

• Comprehensive benefits package.

• Remote-first work environment.