Senior Cloud Security Engineer — AWS, Kubernetes, Go

Qualia; Austin (TX); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote-first development

Office in Austin (hybrid option)

Job summary

Qualia is seeking a Senior Cloud Security Engineer to design, implement, and secure AWS and Kubernetes environments, using Terraform, policy-as-code, and Go services to detect and automate security. You’ll help shape production access and guardrails.

As one of two on the Cloud Security team, you’ll collaborate with SRE and Platform, own IAM, runtime protections, and incident response, and contribute to a remote-first culture with Austin offices and hybrid options.

Qualifications

• 6+ years in cloud security, infrastructure, SRE, or platform engineering.
• Deep hands-on AWS: IAM, Organizations, VPC, KMS, CloudTrail, GuardDuty.
• Production Kubernetes security: RBAC, network policy, pod security.
• Strong Terraform and IaC, with guardrails for teams.
• Production code: Go preferred; Python/TypeScript okay.
• Explain attacker movement from credentials to data and detections.

Responsibilities

• Harden AWS: IAM boundaries, network segmentation, KMS in Terraform/Go.
• Secure Kubernetes: admission policies, RBAC, network policies.
• Build guardrails: reusable IaC modules and CI policy checks.
• Engineer detections: write Go services for cloud/K8s logs.
• Implement just-in-time access and secrets management.
• Run posture checks across accounts and containers; automate fixes.
• Respond to cloud alerts and incidents; prevent recurrence.
• Review infra PRs and design proposals with SRE and engineers.

Skills

Cloud security

AWS

Kubernetes

Terraform

Go

CI/CD

Tools

Terraform

Kubernetes

Okta

Job description

Qualia is seeking a Senior Cloud Security Engineer to design, implement, and secure AWS and Kubernetes environments, using Terraform, policy-as-code, and Go services to detect and automate security. You’ll help shape production access and guardrails.

As one of two on the Cloud Security team, you’ll collaborate with SRE and Platform, own IAM, runtime protections, and incident response, and contribute to a remote-first culture with Austin offices and hybrid options.