Senior Cloud Security Architect — Kubernetes & IAM

United States Digital Space LLC; Atlanta (GA); Hybrid; USD 149,000 - 235,000; Full time

Benefits offered by this job

Total Rewards package

Equity

Job summary

United States Digital Space LLC is seeking a Senior Cloud Security Engineer II to lead technical direction in cloud security. You will define standards, guardrails, and reference architectures, and mentor engineers across AWS, GCP, and Kubernetes.

The role emphasizes threat modeling, detection engineering, and secure platform design. You will own security tooling, incident response, and vulnerability management for large-scale cloud environments, driving secure-by-default patterns across

Qualifications

• Several years owning cloud security in production — on-call for it, not adjacent to it.
• Hands-on experience with AWS as primary cloud, GCP, and self-managed Kubernetes.
• You read and write code (Python, Terraform).

Responsibilities

• Define cloud security standards, guardrails, and reference architectures for wide adoption across engineering teams.
• Lead cross-functional security initiatives end to end with measurable outcomes.
• Own threat modeling discipline for new cloud technologies and patterns.
• Drive detection strategy and incident response for cloud threats across AWS and GCP.
• Oversee security tooling (CrowdStrike, Tenable) and vulnerability management for cloud assets.
• Own security of self-managed Kubernetes platforms and IaC/CI/CD security practices.

Skills

Cloud security

AWS

GCP

Kubernetes

Threat modeling

Incident response

IAM security

Python

Terraform

Tools

CrowdStrike

Tenable

Job description

United States Digital Space LLC is seeking a Senior Cloud Security Engineer II to lead technical direction in cloud security. You will define standards, guardrails, and reference architectures, and mentor engineers across AWS, GCP, and Kubernetes.

The role emphasizes threat modeling, detection engineering, and secure platform design. You will own security tooling, incident response, and vulnerability management for large-scale cloud environments, driving secure-by-default patterns across