Senior Cloud Security Engineer – Enterprise & Zero Trust

Archer; San Jose (CA); On-site; USD 155,000 - 185,000; Full time

Job summary

Archer is seeking an Enterprise Cloud Security Engineer to design and secure cloud infrastructure across AWS/Azure, aligning with aviation standards. You will automate IaC security, integrate DevSecOps practices, and ensure compliance with NIST/FedRAMP while safeguarding telemetry and flight data.

Your role combines hands-on cloud security with governance, threat detection, and incident response, requiring 5+ years in the field and strong scripting capabilities.

Qualifications

• 5+ years of experience in Cloud Security, DevSecOps, or Infrastructure Engineering.
• At least 3 years focused on public cloud (AWS, Azure, and GCP).
• Deep hands-on expertise with Terraform, Kubernetes, and Linux environments.
• Proficiency in Python, Go, or Bash for automating security tasks.
• Experience implementing and tuning CSPM/CNAPP tools and SIEM platforms.
• Working knowledge of NIST CSF, NIST 800-53, or FedRAMP requirements.

Responsibilities

• Design, implement, and maintain secure cloud architectures across AWS and Azure.
• Lead security review and automated scanning of IaC templates (Terraform, CloudFormation, Helm).
• Integrate security tooling into CI/CD pipelines to enable rapid, secure deployment.
• Secure containerized workloads and orchestration platforms (EKS/AKS) with runtime protection and image scanning.
• Map cloud security controls to industry frameworks and automate evidence collection for audits.
• Build high-fidelity detection rules for cloud threats using SIEM/SOAR platforms; lead investigations.
• Protect telemetry and data pipelines with robust encryption and key management.

Skills

Cloud security

Public cloud

Terraform

Kubernetes

Python/Go/Bash

CSPM/CNAPP tools

SIEM platforms

Tools

Wiz

Prisma Cloud

Orca

Sysdig

Tenex

Splunk

Datadog Security

Job description

Archer is seeking an Enterprise Cloud Security Engineer to design and secure cloud infrastructure across AWS/Azure, aligning with aviation standards. You will automate IaC security, integrate DevSecOps practices, and ensure compliance with NIST/FedRAMP while safeguarding telemetry and flight data.

Your role combines hands-on cloud security with governance, threat detection, and incident response, requiring 5+ years in the field and strong scripting capabilities.