Senior Cloud Security Engineer - Kubernetes IAM Guardrails

VulnU; Amsterdam; Hybrid; EUR 110.000 - 150.000; Vollzeit

Benefits dieser Stelle

Paid parental leave

Equity

Flexible PTO

Daily catered lunches

Commuting expenses covered

Zusammenfassung

Flexport in Amsterdam is seeking a Senior Cloud Infrastructure Security Engineer to design and harden our AWS and Kubernetes security posture, implementing guardrails and secure-by-default patterns across services.

You will build policy-as-code, advance IaC scanning, and partner with platform engineers to ensure secure defaults are inherited by new services, while contributing as the local voice for cloud security in Europe.

Qualifikationen

• 5–8 years of experience in cloud, infrastructure, or platform security engineering.
• Hands-on AWS and Kubernetes experience.
• Proficiency in Go and Python.
• Experience with infrastructure-as-code (Terraform) and a GitOps delivery model.
• Knowledge of IAM and least-privilege design across cloud and container environments.
• Experience with cloud security posture tooling (Wiz, Orca, Prisma) as a signal source.
• Software supply-chain security experience (SLSA, artifact signing).
• Multi-cloud experience.

Aufgaben

• Design and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns for new services.
• Harden Kubernetes platform: pod security, service mesh and network policy, secrets management, and supply-chain controls.
• Build and maintain policy-as-code and IaC scanning that block risky patterns in CI.
• Write real code — Go or Python, shipped through the same CI/CD the rest of engineering uses.
• Act as the local technical voice on cloud and infrastructure security for Amsterdam teams, and partner with US team.

Kenntnisse

AWS

Kubernetes

Go

Python

IAM

GitOps

Security architecture

Threat modeling

Tools

Terraform

Jobbeschreibung

Flexport in Amsterdam is seeking a Senior Cloud Infrastructure Security Engineer to design and harden our AWS and Kubernetes security posture, implementing guardrails and secure-by-default patterns across services.

You will build policy-as-code, advance IaC scanning, and partner with platform engineers to ensure secure defaults are inherited by new services, while contributing as the local voice for cloud security in Europe.