Senior Cloud & Platform Security Engineer — Production-Ready AV

Atoms; San Francisco (CA); On-site; USD 167,000 - 230,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

Flexible Spending Account / Health

401(k)

Equity

Sick time and PTO

Team lunch

Job summary

Atoms in San Francisco is seeking a Senior Software Engineer focused on Cloud & Platform Security to partner with our Infrastructure team and secure fleet management systems. You will own security across identities, secrets, and APIs, shaping access controls for production environments.

You will harden Kubernetes controls, implement least-privilege design, and collaborate with engineers to build secure, scalable infrastructure for autonomous vehicle operations.

Qualifications

• 5+ years of experience in cloud, infrastructure, or platform security.
• Hands-on experience working with production Kubernetes environments.
• Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
• Experience designing or reviewing both coarse-grained and fine-grained authorization models.
• Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
• Experience managing or securing non-human identities and service-to-service access.
• Strong understanding of network segmentation and access boundaries in cloud environments.
• Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Responsibilities

• Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
• Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
• Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
• Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
• Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
• Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.

Skills

Cloud security

Kubernetes security

API security

Authorization design

Non-human identities

Network segmentation

Security collaboration

RBAC

Tools

HashiCorp Vault

Cloud KMS

Istio

Kubernetes

Job description

Atoms in San Francisco is seeking a Senior Software Engineer focused on Cloud & Platform Security to partner with our Infrastructure team and secure fleet management systems. You will own security across identities, secrets, and APIs, shaping access controls for production environments.

You will harden Kubernetes controls, implement least-privilege design, and collaborate with engineers to build secure, scalable infrastructure for autonomous vehicle operations.