Senior Cloud Security Engineer

Pixieset; Vancouver; Hybrid; CAD 125,000 - 160,000; Full time

Benefits offered by this job

Hybrid work

Vacation & PTO

RRSP matching

Health & lifestyle spending

Education budget

Charitable donation matching

MacBook & home office budget

Team-building events

Great Place to Work

Job summary

Pixieset is seeking a Senior Cloud Security Engineer to lead security across AWS, Cloudflare, and Kubernetes. In this hands-on role, you will design secure infrastructure patterns, embed guardrails into how we build and deploy, and help teams address cloud risks effectively.

You’ll collaborate with Security, DevOps, and Engineering to improve our cloud security posture while enabling teams to move quickly and confidently.

Qualifications

• 5+ years of experience in software engineering, cloud engineering, infrastructure, DevOps, or a related technical role within a SaaS environment.
• 3+ years of experience in cloud security, infrastructure security, or a related engineering role.
• Strong hands-on experience securing production workloads in AWS, including IAM, networking, logging, and native security services.
• Experience securing Kubernetes and containerized environments.
• Experience securing edge infrastructure using Cloudflare or a similar platform, including DNS, WAF, and Zero Trust access.
• Proficiency with CloudFormation, CDK, Terraform or similar, and integrating security controls into infrastructure-as-code and CI/CD workflows
• Experience operating a CNAPP or CSPM platform such as Wiz, Prisma Cloud, or a comparable tool
• Experience with cloud threat detection, vulnerability management, incident investigation, and remediation
• Understanding of emerging security risks in agentic and AI-enabled systems
• Scripting or programming experience with Python, Go, Bash, or a similar language
• Strong communicator and collaborator with a growth mindset — quick to learn new technologies, adapt to diverse platforms and codebases, and work effectively across teams
• Self-motivated with sharp attention to detail and a passion for mentoring, fostering a culture of continuous learning while empowering engineers, developers, and testers to deliver high-quality, secure solutions

Responsibilities

• Design and improve security guardrails across our AWS organization, accounts, networks, and identity and access management
• Define and implement security standards for Kubernetes, containers, secrets, credentials, and encryption
• Own and improve edge security controls across Cloudflare, including DNS, WAF, abuse prevention, and Zero Trust access
• Define and improve the security of cloud workloads, including AI services, agents, and their access to infrastructure, data, credentials, and internal tools
• Embed security into infrastructure-as-code workflows and CI/CD pipelines
• Own and improve our cloud security posture management platform, including triage, risk prioritization, and remediation workflows
• Strengthen cloud logging, monitoring, threat detection, and incident response readiness
• Identify and mitigate security risks introduced by AI agents, including permissions, tooling access, credential exposure, and data leakage
• Develop automation and reusable security controls that make secure infrastructure easier to build and operate
• Partner with DevOps and Engineering teams to evaluate cloud architecture, resolve risks, and implement secure defaults
• Help define the cloud security roadmap and communicate priorities and progress to technical stakeholders and leadership

Skills

5+ years SaaS

3+ years cloud security

AWS security

Kubernetes security

Edge security Cloudflare

IaC: CloudFormation CDK Terraform

CNAPP/CSPM tools

Threat detection & vulnerability mgmt

Programming: Python/Go/Bash

Strong communication

Mentoring

Job description

We’re hiring a Senior Cloud Security Engineer to strengthen and lead cloud security across Pixieset’s AWS, Cloudflare, and Kubernetes environments.

In this hands‑on role, you’ll establish secure infrastructure patterns, embed practical guardrails into how we build and deploy, and help teams identify and address cloud risks effectively. You’ll work closely with Security, DevOps, and Engineering to improve our cloud security posture while enabling teams to move quickly and confidently.

If you enjoy solving complex infrastructure security challenges, building scalable solutions, and influencing how security works across an organization, we’d love for you to join our team.

Your Impact

• Design and improve security guardrails across our AWS organization, accounts, networks, and identity and access management
• Define and implement security standards for Kubernetes, containers, secrets, credentials, and encryption
• Own and improve edge security controls across Cloudflare, including DNS, WAF, abuse prevention, and Zero Trust access
• Define and improve the security of cloud workloads, including AI services, agents, and their access to infrastructure, data, credentials, and internal tools
• Embed security into infrastructure-as-code workflows and CI/CD pipelines
• Own and improve our cloud security posture management platform, including triage, risk prioritization, and remediation workflows
• Strengthen cloud logging, monitoring, threat detection, and incident response readiness
• Identify and mitigate security risks introduced by AI agents, including permissions, tooling access, credential exposure, and data leakage
• Develop automation and reusable security controls that make secure infrastructure easier to build and operate
• Partner with DevOps and Engineering teams to evaluate cloud architecture, resolve risks, and implement secure defaults
• Help define the cloud security roadmap and communicate priorities and progress to technical stakeholders and leadership

Role Requirements

• 5+ years of experience in software engineering, cloud engineering, infrastructure, DevOps, or a related technical role within a SaaS environment
• 3+ years of experience in cloud security, infrastructure security, or a related engineering role
• Strong hands‑on experience securing production workloads in AWS, including IAM, networking, logging, and native security services
• Experience securing Kubernetes and containerized environments
• Experience securing edge infrastructure using Cloudflare or a similar platform, including DNS, WAF, and Zero Trust access
• Proficiency with CloudFormation, CDK, Terraform or similar, and integrating security controls into infrastructure-as-code and CI/CD workflows
• Experience operating a CNAPP or CSPM platform such as Wiz, Prisma Cloud, or a comparable tool
• Experience with cloud threat detection, vulnerability management, incident investigation, and remediation
• Understanding of emerging security risks in agentic and AI‑enabled systems
• Scripting or programming experience with Python, Go, Bash, or a similar language
• Strong communicator and collaborator with a growth mindset — quick to learn new technologies, adapt to diverse platforms and codebases, and work effectively across teams
• Self‑motivated with sharp attention to detail and a passion for mentoring, fostering a culture of continuous learning while empowering engineers, developers, and testers to deliver high‑quality, secure solutions

What We Offer

• Hybrid work environment (2 in‑office days per week)
• 4 weeks of annual vacation & paid time off for office holiday closures
• RRSP matching
• $2,000 annual health & lifestyle spending account
• $1,000 annual education budget
• $1,000 annual charitable donation matching
• Comprehensive benefits: extended health, critical illness, long‑term disability & life insurance
• Company‑issued MacBook & home office budget
• Anniversary rewards & complimentary Pixieset premium account
• Team‑building activities & company‑wide events
• A workplace recognized for excellence — proudly certified as a Great Place to Work, ranked among Canada’s Best Workplaces, and named one of Canada’s Top Small & Medium Employers

The typical salary range for this position is CAD $117,800 - $160,650 annually. Salary offered will be based on skills, experience and market data.

Working at Pixieset

Pixieset is the #1 go‑to platform for photographers to deliver photos, sell prints, book clients, get paid, and more, all in one place. We help millions of photographers and creatives around the world do more of what they love.

At Pixieset, you’ll find a culture built on collaboration, curiosity, and craftsmanship. We care deeply about clean design, thoughtful code, and meaningful work that creates real impact for our users. We value continuous learning, connection, and the power of technology to simplify complex challenges. Our team is diverse in background and perspective but united by a shared mission: building products that empower creatives to grow with purpose.

Pixieset is growing quickly but thoughtfully, combining the stability to think long‑term with the agility to move fast. Whether you’re building new features, improving infrastructure, or shaping the customer experience, your work has both impact and purpose. Every feature we create helps creatives spend less time managing and more time creating.

For more information on Pixieset, please visit our careers page and follow us on Facebook, LinkedIn, X and Instagram!

Internal Title: Senior Engineer, Cloud Security