Cloud Security Engineer: AWS, IaC & Kubernetes

Snorkel AI; New York, San Francisco (NY, CA); Hybrid; USD 220,000 - 300,000; Full time

Job summary

Snorkel AI in New York, NY is hiring a Security Engineer to evolve security across our cloud infrastructure, developer platform, and product ecosystem. You will partner with the security lead to secure cloud environments, build security automation, and embed security into our engineering workflows.

You will work across infrastructure, platform, product, and application teams to ensure our systems scale securely and meet the bar required for modern, cloud-native, compliance-focused environments.

Qualifications

• Programming skills in Python, Go, or similar languages, with the ability to build security tooling and automation.
• Experience building and operating systems at scale in cloud‑native, containerized environments.
• Proficiency with Infrastructure as Code (Terraform): writing modules, CI/CD pipelines, deployment governance, and security reviews.
• AWS cloud architecture: multi‑account strategies, landing zones, environment isolation, and cross‑account role design.
• Identity and Access Management (IAM): role and policy architectures, least privilege, human and machine identity patterns.
• Network security: security groups, Network ACLs, VPC design, subnet segmentation, routing layers, and egress controls.

Responsibilities

• Build and scale Infrastructure as Code (IaC) governance strategies that embed security while enabling developer velocity
• Operate and tune Cloud Security Posture Management (CSPM) tooling and coordinate remediation through engineering teams
• Investigate security events, triage incidents, identify root causes, and own remediation through resolution
• Architect secure AWS cloud account structures — landing zones, multi-account patterns, network segmentation, and cross-account role strategies
• Design and implement network security architectures using security groups, Network Access Control Lists (NACLs), subnetting, routing layers, and egress controls
• Establish secure‑by‑default design patterns across Kubernetes and containerized workloads
• Design, maintain, and govern Identity and Access Management (IAM) role & policy architectures for both human and machine identities
• Implement encryption everywhere — data‑at‑rest, data‑in‑transit, and key rotation using AWS Key Management Service (KMS) and related services
• Conduct threat modeling, architecture reviews, and secure design assessments for new and existing systems
• Assess and secure AI/ML product architectures, including trust boundaries, API boundaries, and data flow through training and inference pipelines
• Build secure automation through Python, AWS‑native services, and policy‑as‑code frameworks
• Own complex security projects end‑to‑end — from discovery and design docs to implementation, rollout, and long‑term ownership
• Align cloud security strategy with relevant frameworks (NIST CSF, ISO 27001, SOC 2, CIS benchmarks)

Skills

Python

Go

Security tooling

Terraform

AWS

IAM

Network security

CSPM

Incident response

Tools

Terraform

HashiCorp Vault

Secrets Manager

KMS

Job description

Snorkel AI in New York, NY is hiring a Security Engineer to evolve security across our cloud infrastructure, developer platform, and product ecosystem. You will partner with the security lead to secure cloud environments, build security automation, and embed security into our engineering workflows.

You will work across infrastructure, platform, product, and application teams to ensure our systems scale securely and meet the bar required for modern, cloud-native, compliance-focused environments.