Senior Cloud Security Engineer: CSPM, Kubernetes

United States Digital Space LLC; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

United States Digital Space LLC is seeking a Senior Cloud Security Engineer to scale our cloud footprint with emphasis on secure architectures, CSPM, and automation. You will own guardrails and collaborate with platform teams to implement secure, compliant solutions across Azure and AWS environments.

You will lead Kubernetes security, network controls, and identity management, while driving cost-aware security practices and self-service tooling. Strong communication and mentoring are essential.

Qualifications

• 6+ years of cloud security, security engineering, or cloud platform engineering experience.
• Deep hands-on security in Azure or AWS required; experience in both is preferred.
• Experience securing production AKS/EKS environments with RBAC and network policies.
• Proven ability to design secure, compliant cloud architectures and guardrails.

Responsibilities

• Own security architecture, guardrails, and automation patterns with platform teams.
• Evolve CSPM capabilities, policies, guardrails, and automated remediation.
• Maintain cloud network security controls includingFirewalls, WAFs, and segmentation.
• Enforce Kubernetes security (RBAC, network policies, workload isolation, hardening).
• Provide architecture guidance to engineering, regulators, and leadership.
• Mentor junior engineers and improve overall security maturity.

Skills

Cloud security

Azure/AWS

Kubernetes security

CSPM

Terraform

Python

RBAC

Network policies

WAF

DevSecOps

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

Bicep

Job description

United States Digital Space LLC is seeking a Senior Cloud Security Engineer to scale our cloud footprint with emphasis on secure architectures, CSPM, and automation. You will own guardrails and collaborate with platform teams to implement secure, compliant solutions across Azure and AWS environments.

You will lead Kubernetes security, network controls, and identity management, while driving cost-aware security practices and self-service tooling. Strong communication and mentoring are essential.