Cloud Security Engineer

Franklin Fitch; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Daily meals

Excellent benefits

Job summary

Franklin Fitch is seeking a Staff Cloud Security Engineer for a hands-on role in New York, NY (5 days in office). You will own cloud security across a modern, multi-cloud environment (primarily GCP), embedding security into infrastructure, systems, and developer workflows.

This is not a ticket-focused role; it targets engineers who build, automate, and design secure systems at scale. You will lead security architecture and guardrails across IAM, networking, and Kubernetes, shaping platform

Qualifications

• Deep cloud engineering background with a security focus.
• Proven experience building secure cloud infrastructure, not just consuming tools.
• Strong IAM, networking, and distributed systems security knowledge.
• Ability to operate independently at staff level and own technical direction.
• Experience with multi-cloud environments, primarily GCP.

Responsibilities

• Design and implement cloud security architecture across GCP (primary) and AWS.
• Write and own Terraform modules at scale for reusable, secure infrastructure.
• Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation).
• Embed security guardrails into CI/CD pipelines (Spacelift, automation-first).
• Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening.
• Design secure platform primitives and not just one-off controls.
• Implement logging, monitoring, and detection pipelines for cloud environments.
• Lead threat modelling and architecture reviews for new systems.
• Act as a technical leader through code reviews and system design.

Skills

DevOps engineering

Cloud security

Threat modelling

Infrastructure as code

Independent ownership

Tools

Terraform

Kubernetes

Helm

Spacelift

OPA

Job description

Position: Staff Cloud Security Engineer

Location: New York, NY (5 days in office)

Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?

This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world's top financial institutions operate. You're take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.

This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It's for engineers who build, automate, and design secure systems at scale.

What you'll be doing:

• Design and implement cloud security architecture across GCP (primary) and AWS
• Write and own Terraform at scale, building reusable, secure infrastructure modules
• Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)
• Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)
• Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening
• Design secure platform primitives rather than one-off controls
• Implement logging, monitoring, and detection pipelines for cloud environments
• Lead threat modelling and architecture reviews for new systems
• Act as a technical leader, raising the bar through code reviews and system design

What we're looking for:

• Strong platform / DevOps engineering background with a security focus
• Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines
• Experience working in GCP (preferred), AWS (acceptable), or Azure (workable)
• Proven track record of building secure cloud infrastructure, not just consuming tools
• Strong understanding of IAM, networking, and distributed systems security
• Ability to operate independently at staff level, owning technical direction
• Comfortable working in high-performance, fast-paced environments

Nice to have:

• Experience with Spacelift or similar IaC orchestration tools
• Familiarity with policy-as-code (OPA, etc.)
• Background in high-growth startups or infrastructure-heavy environments

What's in it for you:

• Work on cutting-edge AI infrastructure used by top-tier financial institutions
• Join a high-talent-density team with strong engineering standards
• Real ownership of cloud security strategy and architecture
• Build systems where security is engineered - not enforced
• Excellent benefits, daily meals, and a high-performance environment