Senior Cloud Security Engineer

IBM; Austin (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM Software is seeking a Senior Cloud Security Engineer in Austin, TX to architect and implement scalable security solutions across AWS, Azure, and other clouds. You will build tooling with Go/Python, craft IaC guardrails with Terraform, and lead security initiatives across multiple teams to enable secure-by-default deployments.

The role emphasizes IAM, networking, Kubernetes, and workload protection, with a strong focus on automating security controls within CI/CD and development workflows.

Qualifications

• Strong software engineering background in infrastructure, platform, cloud, or security engineering.
• Hands-on cloud security with AWS and/or Azure, including IAM, networking, compute/workloads, containers/Kubernetes.
• Infrastructure as Code experience, preferably Terraform.
• Experience integrating security into CI/CD and engineering workflows.
• Ability to lead complex cloud security initiatives across multiple teams.
• Knowledge of Zero Trust architecture and compliance frameworks.

Responsibilities

• Lead the design and implementation of cloud security architecture and engineering solutions across AWS, Azure, GCP, and other cloud environments.
• Architect and build production-quality security tooling and automation using Go/Golang and Python, integrating security directly into infrastructure and engineering workflows.
• Design preventative security controls and automated guardrails using Terraform and Infrastructure as Code (IaC), enabling secure-by-default cloud deployments.
• Establish scalable security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.
• Design and integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows, shifting security earlier into the engineering lifecycle.
• Provide technical leadership for complex cloud security initiatives, independently driving solutions from architecture and design through implementation and operationalization.
• Identify systemic cloud security risks and translate them into reusable engineering patterns, automation, detections, and preventative controls rather than relying solely on manual remediation.
• Partner with platform, infrastructure, product, and security engineering teams to conduct architecture reviews and influence the design of secure cloud services.
• Improve CSPM/CNAPP, vulnerability management, detection, and cloud security monitoring capabilities and translate findings into engineering improvements.
• Research emerging cloud attack techniques and technologies and apply those insights to evolving cloud security architecture.
• Mentor engineers and provide technical direction on cloud security engineering, automation, and secure infrastructure design.

Skills

Cloud security

Go/Golang

Python

Terraform

CI/CD security

Linux

Leadership

Architecture

Workload identity

Kubernetes

Multi-cloud

Policy as code

Zero Trust

Identity security

Compliance

Education

Bachelor's Degree

Tools

Terraform

Go/Golang

Python

Kubernetes

Job description

Introduction

At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'l have the tools and opportunities to advance your career while creating software that changes the world.

Introduction

At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'l have the tools and opportunities to advance your career while creating software that changes the world.

Your Role And Responsibilities

At HashiCorp, an IBM Company, we’re on a mission to enable organizations to provision, secure, connect, and run infrastructure for any application. Our Security Engineering team helps protect the cloud environments and services that support that mission. We are looking for a senior Cloud Security Engineer with a strong software and infrastructure engineering background to design and build scalable security capabilities across our cloud environments. This role goes beyond identifying security issues: you will engineer preventative controls, automated guardrails, and secure-by-default patterns that enable engineering teams to move quickly while managing cloud risk.

Responsibilities

• Lead the design and implementation of cloud security architecture and engineering solutions across AWS, Azure, GCP, and other cloud environments.
• Architect and build production-quality security tooling and automation using Go/Golang and Python, integrating security directly into infrastructure and engineering workflows.
• Design preventative security controls and automated guardrails using Terraform and Infrastructure as Code (IaC), enabling secure-by-default cloud deployments.
• Establish scalable security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.
• Design and integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows, shifting security earlier into the engineering lifecycle.
• Provide technical leadership for complex cloud security initiatives, independently driving solutions from architecture and design through implementation and operationalization.
• Identify systemic cloud security risks and translate them into reusable engineering patterns, automation, detections, and preventative controls rather than relying solely on manual remediation.
• Partner with platform, infrastructure, product, and security engineering teams to conduct architecture reviews and influence the design of secure cloud services.
• Improve CSPM/CNAPP, vulnerability management, detection, and cloud security monitoring capabilities and translate findings into engineering improvements.
• Research emerging cloud attack techniques and technologies and apply those insights to evolving cloud security architecture.
• Mentor engineers and provide technical direction on cloud security engineering, automation, and secure infrastructure design.
  

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

• Strong software engineering background, ideally in infrastructure, platform, cloud, or security engineering, with experience designing and operating production systems and building automation or tooling using Go/Golang or Python.
• Deep hands-on cloud security experience with AWS and/or Azure, including IAM, networking, compute/workloads, containers/Kubernetes, and cloud-native security controls.
• Strong Infrastructure as Code experience, preferably Terraform, designing reusable, secure infrastructure patterns and automated preventative security controls.
• Experience integrating security into CI/CD and engineering workflows, including Linux environments and automated security guardrails that enable secure-by-default deployments.
• Ability to lead complex cloud security initiatives across multiple engineering teams, effectively communicating architecture, security risks, and technical trade-offs to engineering and security stakeholders.

Preferred Technical And Professional Experience

• Experience designing workload identity, OIDC federation, PKI, secrets management, and short-lived credential architectures.
• Experience building internal developer platforms, self-service infrastructure, paved roads, or automated security guardrails.
• Experience with Cloud Security Posture Management (CSPM) or CNAPP platforms, cloud vulnerability management, and security detection tooling; experience with Wiz is a plus.
• Experience architecting and securing infrastructure across AWS, Azure, and GCP, including developing consistent controls across multiple cloud providers.
• Experience with policy-as-code and preventative security controls integrated into Terraform and CI/CD workflows.
• Experience designing or operating security controls for Kubernetes and containerized workloads.
• Knowledge of Zero Trust architecture, cloud governance, and modern identity security principles.
• Understanding of compliance frameworks such as SOC 2, ISO 27001, and FedRAMP.