Lead Cloud Security Engineer — AWS/Azure & DevSecOps

Archer; San Jose (CA); On-site; USD 133,000 - 185,000; Full time

Job summary

Archer in San Jose, CA seeks an Enterprise Cloud Security Engineer to design and secure cloud-native environments (AWS/Azure) and align them with aviation standards. You will implement secure-by-design IaC, integrate security into CI/CD, and protect telemetry and flight data.

The role requires 5+ years in cloud security or DevSecOps, hands-on Terraform, Kubernetes, and Linux, plus scripting in Python/Go/Bash. Eligible for base pay 133,400–185,000 with benefits. Equal opportunity employer.

Qualifications

• 5+ years of experience in Cloud Security, DevSecOps, or Infrastructure Engineering, with at least 3 years focused on public cloud (AWS, Azure, and GCP).
• Deep hands-on expertise with Terraform, Kubernetes, and Linux environments.
• Proficiency in Python, Go, or Bash for automating security tasks and building custom tooling.

Responsibilities

• Design, implement, and maintain secure cloud architectures across AWS and Azure.
• Enforce zero-trust principles and least-privilege access using advanced IAM policies and roles.
• Lead security review and automated scanning of IaC templates (Terraform, CloudFormation, Helm).
• Integrate security tooling directly into CI/CD pipelines to enable rapid, secure deployment.
• Secure containerized workloads and orchestration platforms (EKS/AKS) with runtime protection and image scanning.
• Map cloud security controls to frameworks (NIST CSF/800-53, FedRAMP, DO-326A) and automate evidence collection.

Skills

Terraform

Kubernetes

Linux

Python

Go

Bash

CSPM tools

SIEM tooling

Tools

Wiz

Prisma Cloud

Orca

Sysdig

Splunk

Datadog Security

Tenex

Job description

Archer in San Jose, CA seeks an Enterprise Cloud Security Engineer to design and secure cloud-native environments (AWS/Azure) and align them with aviation standards. You will implement secure-by-design IaC, integrate security into CI/CD, and protect telemetry and flight data.

The role requires 5+ years in cloud security or DevSecOps, hands-on Terraform, Kubernetes, and Linux, plus scripting in Python/Go/Bash. Eligible for base pay 133,400–185,000 with benefits. Equal opportunity employer.