Senior Cloud Security Engineer: GCP & Cloudflare

NinjaTrader; Chicago (IL); On-site; USD 145,000 - 195,000; Full time

Benefits offered by this job

401(k) with company match

Generous PTO

Job summary

NinjaTrader, based in Chicago, seeks a Staff Cloud Security Engineer to own cloud security architecture across GCP, IAM, and edge defenses. You will set technical direction, mentor engineers, and lead security reviews for new services and major platform changes.

The role requires hands-on expertise in Cloudflare, GCP Armor, Terraform, and CI/CD security, with a focus on secure-by-default practices and threat modeling. Hybrid options available in a fast-paced fintech environment.

Qualifications

• 8+ years of experience in security engineering, including 5+ years in cloud security in production environments.
• Deep hands-on expertise securing Google Cloud Platform environments (IAM, networking, VPC Service Controls, Security Command Center, KMS).
• Experience with Cloudflare WAF, DDoS Protection, Zero Trust, Bot Management, and Google Cloud Armor.

Responsibilities

• Own cloud security architecture across GCP environments and IAM least-privilege design.
• Design and tune edge defenses with Cloudflare and Google Cloud Armor.
• Lead threat modeling and security reviews for new services and major changes.
• Build guardrails as code via policy-as-code, Terraform modules, and CI/CD security controls.
• Advance detection and response by coordinating with SOC and IR teams.

Skills

Cloud security engineering

GCP security

Terraform / IaC

Threat modeling

Incident response

Python/Go

Security architecture

Cross-team collaboration

Tools

Terraform

Cloudflare

Google Cloud Armor

GCP IAM & VPC

Chronicle / SIEM

Job description

NinjaTrader, based in Chicago, seeks a Staff Cloud Security Engineer to own cloud security architecture across GCP, IAM, and edge defenses. You will set technical direction, mentor engineers, and lead security reviews for new services and major platform changes.

The role requires hands-on expertise in Cloudflare, GCP Armor, Terraform, and CI/CD security, with a focus on secure-by-default practices and threat modeling. Hybrid options available in a fast-paced fintech environment.