Senior Cloud Security Engineer

NextGenEnergyJobs; Seattle (WA); On-site; USD 162,000 - 235,000; Full time

Job summary

NextGenEnergyJobs is seeking a Senior Cloud Security Engineer to join our Cloud Security engineering team. You will build resilient, automated security systems at scale, protecting cloud and Kubernetes environments and collaborating with infrastructure and application teams.

You will leverage open-source tools and custom automation to enforce zero-trust and secure CI/CD pipelines, while applying modern IAM, mTLS, SPIFFE, and PKI concepts in a fast-growing company.

Qualifications

• 5+ years of progressive experience in security engineering.
• Hands-on cloud security in AWS/Azure/GCP.
• Experience securing Kubernetes workloads and CI/CD hardening.
• Proficiency in Python or Go for automation.
• Knowledge of IAM standards (OAuth2/OIDC, SAML).

Responsibilities

• Secure Aurora’s cloud environment across infrastructure, workloads, and CI/CD.
• Create automation to solve security problems at the root.
• Design, build, and configure security infrastructure clouds such as AWS, Azure, or GCP.
• Manage the security posture of workloads deployed on Kubernetes environments.

Skills

Security engineering

Cloud security

Kubernetes security

Python

Go

Terraform

Tools

OPA

Trivy

Spire

Terraform

Job description

At the core of everything we do is our commitment to safety.

Key Responsibilities

• Secure Aurora’s cloud environment in the areas of but not limited to:
• Create automation to solve security problems at the root
• Design, build, and configure security infrastructure clouds such as like AWS, Azure, or GCP
• Manage the security posture of workloads deployed on Kubernetes environments

Requirements

• We’re searching for a Senior Cloud Security Engineer . You will be part of the Cloud Security engineering team dedicated to building resilient, automated security systems at scale.
• Cloud security collaborates with infrastructure and application teams closely. The areas we cover are infrastructure security, workload security, and CI/CD hardening.
• Our team is dedicated to building resilient, automated systems at scale. We take a hybrid approach to our toolkit: we utilize the best of open-source (OPA, Trivy, Spire) and COTS products, while still writing custom code to automate workflows and harden our global digital integrity. You’ll help us strike the perfect balance between leveraging existing solutions and building custom ones from the ground up.
• 5+ years of progressive experience in security engineering
• Understanding of fundamental security concepts such as Authentication, Authorization, Zero-Trust, and their application to cloud native infrastructure and applications.
• Hands-on experience in securing cloud and Kubernetes environments. Experience with Kubernetes admission controllers, vulnerability management, supply-chain security, network security, and use of mTLS and PKI to secure infrastructure.
• Ability to design and implement security controls for Kubernetes, including strong knowledge of authorization models, admission controllers, and security best practices.
• Understanding of modern Identity and Access Management (IAM) standards and technologies such as OAuth2/OIDC, SAML.
• Proficiency in at least one modern programming/scripting language (e.g., Python or Go) for building security automation.
• Experience writing and using Terraform.
• Deep fundamental understanding of enterprise-level network security, operating system (Linux), Kubernetes, CI/CD, and application security principles.
• Familiarity with compliance frameworks (e.g., SOX, SOC 2, ISO 27001).
• Familiarity with machine identity frameworks like SPIFFE/SPIRE, mTLS or equivalent.
• The base salary range for this position is $162,000 - $235,000 per year. Aurora’s pay ranges are determined by role, level, and location. Within the range, the successful candidate’s starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.