Cloud Security Engineer — Multi-Cloud Kubernetes Expert

Applied Intuition; United States; On-site; USD 133,000 - 190,000; Full time

Benefits offered by this job

Equity

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401k

Learning stipend

Wellness stipend

Paid time off

Job summary

Applied Intuition in Sunnyvale—with multi-cloud footprint across AWS, Azure, GCP, and OCI—seeks a Cloud Security Engineer to harden Kubernetes and enforce IAM across environments.

You will drive CSPM, IaC security, container security, and runtime protection, collaborating with the Corporate Security & Infrastructure team to prevent misconfigurations and ensure compliance.

This role requires 5+ years in secure cloud engineering and hands-on Kubernetes security in production environments.

Qualifications

• 5+ years of industry experience in software engineering or security engineering, with a focus on designing and building secure, production-grade cloud systems.
• Extensive, demonstrable experience with Kubernetes from a security perspective (securing containerized workloads, enforcing RBAC, and cloud-native secret management).
• Implemented AI to rapidly identify, validate, and remediate security issues without impact.
• Deep operational security experience with AWS (mandatory), with highly preferred practical experience deploying and securing infrastructure across Azure, GCP, or OCI.
• Proficiency in Infrastructure-as-Code (IaC) tools such as Terraform, CloudFormation, or AWS CDK to deploy and manage environments.
• Hands-on expertise in configuring, monitoring, and driving remediation through CSPM platforms like Wiz.
• A strong background in designing and enforcing complex IAM and least-privilege architectures across multi-cloud and on-prem environments.
• Experience with container security, image scanning, and runtime protection tools.

Responsibilities

• Cloud Infrastructure Security: Securely deploy and maintain infrastructure across AWS, Azure, GCP, OCI, with guardrails to prevent insecure deployments.
• Kubernetes Cluster Hardening: Enforce security policies like RBAC, network policies, admission controls for Kubernetes clusters.
• IAM: Develop and enforce robust IAM policies across systems, enforcing least privilege on cloud and container levels.
• Container Security: Ensure image, registry, and runtime security using Docker, Podman, and scanning tools.
• IaC Security: Use Git-based workflows with Terraform, CloudFormation, or AWS CDK for auditable deployments.
• CSPM: Maintain CSPM tools (e.g., Wiz) to detect and remediate misconfigurations and drift.
• Compliance Automation: Automate checks and evidence for audits across multi-cloud environments.
• Runtime Security: Monitor and protect running apps and containers from threats.

Skills

Kubernetes security

AWS security

IAM design

IaC security

CSPM

Container security

Security automation

Tools

Terraform

CloudFormation

AWS CDK

Wiz

Docker

Podman

Job description

Applied Intuition in Sunnyvale—with multi-cloud footprint across AWS, Azure, GCP, and OCI—seeks a Cloud Security Engineer to harden Kubernetes and enforce IAM across environments.

You will drive CSPM, IaC security, container security, and runtime protection, collaborating with the Corporate Security & Infrastructure team to prevent misconfigurations and ensure compliance.

This role requires 5+ years in secure cloud engineering and hands-on Kubernetes security in production environments.