Senior Cloud Security Engineer – AWS & Infra Guardrails

Ridgeline; Reno, San Ramon (NV, CA); On-site; USD 149,000 - 250,000; Full time

Benefits offered by this job

Company Stock Plan

Unlimited vacation

Education reimbursements

Wellness reimbursements

0 cost health insurance

Job summary

Ridgeline is seeking an experienced Senior Infrastructure Security Engineer to secure cloud environments and own security for select platforms. You will define cloud security best practices, perform architecture reviews in AWS, and drive security-by-design across engineering, DevOps, and product teams.

You will build scalable security tooling, embed security into CI/CD, and champion least-privilege, encryption, and runtime protections. Strong collaboration and communication are essential.

Qualifications

• Bachelor’s degree in Computer Science or equivalent practical experience.
• 5+ years of cloud security or platform engineering.
• Proficient in Python; Kotlin or TypeScript a plus.
• Strong AWS IAM, networking, compute, and data persistence knowledge.
• Experience with Terraform and CI/CD.

Responsibilities

• Independently perform cloud architecture and network security reviews for AWS and other cloud services.
• Develop scalable security tooling with AI augmentation where appropriate.
• Design guardrails (IAM, SCPs) and policy-as-code for domains or services.
• Ensure secure CI/CD and infrastructure automation with least-privilege enforcement.
• Collaborate with engineering, product, and compliance teams to define security requirements.

Skills

Python

Kotlin

TypeScript

AWS

Terraform

Education

Bachelor’s degree in Computer Science or equivalent

Tools

GuardDuty

CloudWatch

CloudTrail

ECS/EKS

S3

Terraform

Job description

Ridgeline is seeking an experienced Senior Infrastructure Security Engineer to secure cloud environments and own security for select platforms. You will define cloud security best practices, perform architecture reviews in AWS, and drive security-by-design across engineering, DevOps, and product teams.

You will build scalable security tooling, embed security into CI/CD, and champion least-privilege, encryption, and runtime protections. Strong collaboration and communication are essential.