Cloud Security Engineer: Terraform & Platform Security

Rogo; New York (NY); Hybrid; USD 170,000 - 230,000; Full time

Job summary

Rogo is hiring a Security Engineer to lead cloud security architecture across AWS and GCP. This hands-on role focuses on coding and design over policy, owning secure primitives, Terraform modules, and scalable identity and network architecture.

You will mentor engineers, review infrastructure changes, and drive security across CI/CD and production workloads, including Kubernetes security and logging/detection pipelines.

Qualifications

• Architect and implement cloud security foundations across AWS and GCP.
• Author Terraform-based security architecture with modules for IAM, networking, logging, and encryption.
• Design scalable identity systems including workload identity and cross-cloud access patterns.
• Lead security design of cloud networking (VPC, private connectivity, firewalling).
• Build security automation across CI/CD and cloud environments.
• Own Kubernetes security for production workloads (GKE/EKS) with RBAC, image security, and runtime controls.
• Define logging, monitoring, and detection pipelines for high-signal security posture.
• Perform threat modeling and architectural reviews for new infra.
• Mentor engineers and raise the overall security bar.

Responsibilities

• Architect and implement cloud security foundations across AWS and GCP, including account/project structure, IAM models, network segmentation, and secure service-to-service communication.
• Own and author Terraform-based security architecture, including reusable modules for IAM, networking, logging, and encryption; policy enforcement and guardrails.
• Design and operate cloud identity systems at scale, including workload identity, service accounts, role assumption, and cross-cloud access patterns.
• Lead the security design of cloud networking, including VPC architecture, private connectivity, egress control, firewalling, and isolation boundaries.
• Build and maintain security automation across CI/CD and cloud environments, eliminating manual processes and reducing operational risk.
• Own Kubernetes and container security for production workloads (GKE/EKS), including cluster hardening, RBAC, workload identity, image security, and runtime controls.
• Define and implement logging, monitoring, and detection pipelines that provide high-signal visibility into cloud security posture and incidents.
• Perform threat modeling and architectural reviews for new infrastructure and platform changes, driving security decisions with technical authority.
• Act as a technical multiplier: reviewing critical infrastructure changes, mentoring engineers, and raising the overall security bar across the organization.

Skills

Terraform

AWS

GCP

Cloud security

Kubernetes (GKE/EKS)

RBAC

CI/CD security

Threat modeling

Security automation

Incident response

Tools

Terraform

OPA

Job description

Rogo is hiring a Security Engineer to lead cloud security architecture across AWS and GCP. This hands-on role focuses on coding and design over policy, owning secure primitives, Terraform modules, and scalable identity and network architecture.

You will mentor engineers, review infrastructure changes, and drive security across CI/CD and production workloads, including Kubernetes security and logging/detection pipelines.