Principal Cloud Security Engineer Pax8

Fremont Economic Development Corp.; Northern (KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k) with Company Match

Employee Assistance Program (EAP)

Employer-Paid Life, AD&D, Short-Term &

Flexible Open PTO

RTD EcoPass (Colorado-based employees)

Job summary

Pax8 is hiring a Principal Cloud Security Engineer across the USA and Canada to shape and secure the future of our cloud marketplace, protecting the infrastructure powering millions of platform interactions through modern cloud, platform, and AI-enabled security practices.

This role sits in the Platform Security function and offers technical authority to design, implement, and govern security across a rapidly evolving cloud ecosystem, partnering with engineering leaders to enable safe scale and

Qualifications

• Extensive experience securing modern cloud and infrastructure platforms.
• Deep practical expertise across AWS services including identity, networking, encryption, logging, secrets management, containers, and data services.
• Demonstrated success creating security standards, architectural guidance, and governance frameworks that engineering teams genuinely adopt.

Responsibilities

• Create and evolve security baselines for cloud infrastructure, container platforms, platform tooling, and third-party services, ensuring security controls remain effective as our technology landscape grows.
• Strengthen identity and access controls with modern least-privilege approaches across cloud identities, service accounts, and containerized workloads.
• Secure the software delivery lifecycle by leading security governance across build and deployment platforms, protecting code, pipelines, and secrets.
• Validate security architecture at scale by evaluating network segmentation, cloud connectivity, and workload isolation to reduce attack surface.
• Drive meaningful security metrics reporting that translates technical findings into business context for informed risk decisions.
• Define security patterns for engineering teams by developing reference architectures and engineering standards.

Skills

Cloud security

AWS security

Kubernetes security

IAM / SSO

Threat modelling

Security governance

CI/CD security

Platform automation

Tools

Terraform

GitHub Actions

Job description

Pax8 is hiring a Principal Cloud Security Engineer across the USA and Canada to shape and secure the future of our cloud marketplace, protecting the infrastructure powering millions of platform interactions through modern cloud, platform, and AI-enabled security practices.

Build the Security Foundations of the Future

This is a rare opportunity to become the technical authority for cloud security within Pax8's Platform Security function. You'll influence how security is designed, implemented, and governed across a rapidly evolving cloud ecosystem while partnering directly with engineering leaders responsible for some of the most critical technology in our business.

As technology, automation, and AI continue transforming the cloud marketplace, you'll help define the standards that allow innovation to happen safely at scale. You'll have the autonomy to set direction, solve complex security challenges, and create patterns that engineering teams can adopt globally.

Join a Company Changing the Cloud Marketplace

At Pax8, we're building the technology marketplace of the future through cloud innovation, AI-powered insights, and a thriving global partner ecosystem. Today we support more than 39,000 partners, work with 130+ vendors, and help hundreds of thousands of businesses embrace modern technology.

Learn more about our journey through our US About page and US Newsroom, where you'll see how we're continuing to innovate, grow and invest in the future of technology.

What You'll Be Doing

Create and evolve security baselines for cloud infrastructure, container platforms, platform tooling, and third-party services, ensuring security controls remain effective as our technology landscape grows.

Strengthen Identity & Access Controls

Define modern least-privilege approaches across cloud identities, service accounts, platform access models, and containerized workloads, reducing risk while enabling engineering productivity.

Secure the Software Delivery Lifecycle

Lead security governance across build and deployment platforms, helping engineering teams implement resilient controls that protect code, pipelines, secrets, and software supply chains.

Validate Security Architecture at Scale

Evaluate network segmentation strategies, cloud connectivity patterns, workload isolation approaches, and platform architecture decisions to reduce attack surface and limit blast radius.

Drive Visibility Through Security Metrics

Create meaningful security posture reporting that translates technical findings into business context, enabling informed risk decisions and continuous improvement.

Define Security Patterns for Engineering Teams

Develop reference architectures, engineering standards, and decision records that make secure implementation easier and more consistent across the organisation.

Work closely with DevOps, Site Reliability Engineering, and Platform Engineering teams, embedding security expertise into architecture reviews, operational planning, and strategic initiatives.

The Impact You’ll Have

Your work will directly influence the resilience, scalability, and security posture of the technology platform that powers Pax8's marketplace. You'll help engineering teams move faster with confidence, reduce operational risk, strengthen compliance readiness, and ensure security remains an accelerator rather than a blocker to innovation.

This role combines deep technical expertise with organisation-wide influence, allowing you to shape platform security practices that affect teams, partners, and customers globally.

What Success Looks Like

You'll thrive in this role if you bring:

• Extensive experience securing modern cloud and infrastructure platforms.
• Deep practical expertise across Amazon Web Services services including identity, networking, encryption, logging, secrets management, containers, and data services.
• Demonstrated success creating security standards, architectural guidance, and governance frameworks that engineering teams genuinely adopt.
• Proven ability to influence technical decisions without relying on reporting-line authority.
• Advanced knowledge of Kubernetes security, workload isolation, access controls, network controls, and container governance.
• Strong understanding of software delivery security, platform automation, and modern deployment pipelines.
• Hands‑on experience reviewing infrastructure as code and ensuring security controls are embedded into engineering workflows.
• Experience assessing SaaS and platform technologies through threat modelling and security architecture reviews.
• Familiarity with cloud security posture management and platform governance tooling beyond simple alert review.
• Knowledge of security considerations for emerging AI and agent-based workloads.
• Experience operating within multi‑tenant environments where scale, availability, and data isolation are critical.
• The ability to balance pragmatism and risk management while remaining a trusted advisor to engineering teams.

Trust and Hiring

At Pax8, we care deeply about building genuine, trust based relationships — starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you're applying as your authentic self, you have nothing to worry about — we're excited to meet you.

We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. More information is available in our Recruitment Privacy Notice. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process.

We encourage you to apply even if you don't meet 100% of the criteria. We're committed to diverse perspectives, inclusive hiring and sharing your transferrable skills. To fulfil this role, you must hold valid right to work in USA or Canada.

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:

• 401(k) with Company Match
• Employee Assistance Program (EAP)
• Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
• Flexible Open PTO
• RTD EcoPass (eligible Colorado-based employees)

Grow Your Career With Us

There's extensive room for a talented individual to grow at pace — whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level.

Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start-up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, it's business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life.

Background Checks

As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). All checks are completed by our third-party provider, First Advantage. Once checks have been completed all candidates will receive a copy for their records.

Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. Privacy notice: https://www.pax8.com/en-us/terms/job-applicant-privacy-notice/

Application Deadline- 10/23/2026

At Pax8, we care deeply about building genuine, trust‑based relationships — starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you’re applying as your authentic self, you have nothing to worry about — we’re excited to meet you.

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:

• 401(k) with Company Match
• Employee Assistance Program (EAP)
• Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
• Flexible Open PTO
• RTD EcoPass (eligible Colorado-based employees)