Cloud Security Engineer — IAM & Secrets

Apply; New York (NY); Hybrid; USD 230,000 - 280,000; Full time

Job summary

Notion is seeking an IC4 Infrastructure Security Engineer to own end-to-end security problems across our cloud stacks, designing pragmatic controls and shipping secure defaults at scale.

You will contribute to threat modeling, IAM design, and security guidance for cross-functional teams, while ensuring secure, auditable workflows in production environments. This role supports a hybrid work model in NYC or San Francisco with anchor days.

Qualifications

• Experience designing and maintaining cloud security architectures.
• Experience shipping production-grade code with secure design.
• Ability to debug and improve production systems with minimal disruption.
• Ability to model threats and balance trade-offs.
• Excellent written and verbal communication for cross-functional teams.

Responsibilities

• Proactively enhance the security posture of AWS accounts and cloud infrastructure.
• Create secure frameworks for secrets management and authentication/authorization.
• Design and deploy robust IAM solutions.
• Provide guidance on security and privacy best practices to partners.
• Participate in mitigation strategies during security incident response.

Skills

Security architecture

Backend development

Production debugging

Threat modeling

Clear communication

Job description

Notion is seeking an IC4 Infrastructure Security Engineer to own end-to-end security problems across our cloud stacks, designing pragmatic controls and shipping secure defaults at scale.

You will contribute to threat modeling, IAM design, and security guidance for cross-functional teams, while ensuring secure, auditable workflows in production environments. This role supports a hybrid work model in NYC or San Francisco with anchor days.