Senior Cloud Security Architect - AWS & GCP

scribdinc; San Francisco (CA); Hybrid; USD 179,000 - 255,000; Full time

Benefits offered by this job

Scribd Flex (flexible work model)

Comprehensive health, dental, and vis­

Mental health support and disability

Generous paid time off and sabbaticals

Parental leave and family support

Job summary

Scribd, Inc. is seeking a Staff Cloud Security Engineer to lead security architecture and guardrails for our AWS and GCP environments. You will drive secure-by-default capabilities, shape the security roadmap, and partner with engineering teams to reduce risk at scale.

This role emphasizes hands-on leadership, Terraform-based automation, and strong IAM controls, with a focus on secure workloads, identity, and incident response across Scribd's cloud footprint in the San Francisco area.

Qualifications

• 10+ years of experience in cloud or infrastructure security engineering or equivalent blend with hands-on cloud security experience.
• Experience shaping security architecture and leading initiatives across team boundaries.
• Deep hands-on identity and access management expertise, including least-privilege and cross-account access.
• Experience securing cloud workloads including Kubernetes, containers, runtime protection, and workload isolation.
• Experience with cloud security posture management and workload protection; CSPM/CNAPP platforms.

Responsibilities

• Set the Cloud Security architecture across AWS and GCP environments, including guardrails and IAM discipline.
• Secure cloud workloads and delivery paths, build reusable security capabilities and paved paths (Terraform modules, policy-as-code).
• Strengthen cloud visibility and resilience with threat hunting and incident response support.
• Drive Cloud Security strategy and technical direction; prioritize risks and influence engineering teams.

Skills

Cloud security

Security architecture

IAM

Kubernetes

Terraform

Cloud security tooling

Threat modeling

Incident response

Security governance

Tools

Terraform

Job description

Scribd, Inc. is seeking a Staff Cloud Security Engineer to lead security architecture and guardrails for our AWS and GCP environments. You will drive secure-by-default capabilities, shape the security roadmap, and partner with engineering teams to reduce risk at scale.

This role emphasizes hands-on leadership, Terraform-based automation, and strong IAM controls, with a focus on secure workloads, identity, and incident response across Scribd's cloud footprint in the San Francisco area.