Senior Cloud & Platform Security Engineer - Onsite SF

Pronto; San Francisco (CA); On-site; USD 167,000 - 230,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401(k)

Equity

Sick Time and Paid Holidays

Team lunch in SoMa

Job summary

Pronto AI in San Francisco seeks a Senior Software Engineer focused on Cloud & Platform Security to join the Infrastructure team. You’ll apply deep security expertise across identity, secrets, network segmentation, and fleet-management APIs to protect production systems.

You’ll design least-privilege access, strengthen secrets management with Vault or cloud KMS, review Kubernetes controls, and partner with engineers to build secure, scalable services used in autonomous fleets.

Qualifications

• 5+ years of experience in cloud, infrastructure, or platform security.
• Hands-on experience with production Kubernetes environments.
• Strong understanding of API security (OAuth/OIDC, mTLS, authz).
• Experience with secrets-management systems (Vault, cloud KMS).
• Experience securing non-human identities and service-to-service access.
• Ability to influence security decisions through collaboration with infra/engineers.

Responsibilities

• Design and enforce least-privilege access across cloud environments.
• Strengthen secrets and credential management using Vault or KMS.
• Threat model and review fleet telemetry and APIs for authz and rate limits.
• Improve network segmentation to isolate fleet-management and control systems.
• Collaborate with Infrastructure engineers on architecture reviews for security.
• Review and improve Kubernetes security controls (RBAC, network policies).

Skills

Cloud security

Kubernetes

OAuth / OIDC

mTLS

API security

Vault / Secrets management

Non-human identities

RBAC

Network segmentation

Tools

Kubernetes

HashiCorp Vault

Cloud KMS

Job description

Pronto AI in San Francisco seeks a Senior Software Engineer focused on Cloud & Platform Security to join the Infrastructure team. You’ll apply deep security expertise across identity, secrets, network segmentation, and fleet-management APIs to protect production systems.

You’ll design least-privilege access, strengthen secrets management with Vault or cloud KMS, review Kubernetes controls, and partner with engineers to build secure, scalable services used in autonomous fleets.