Senior Cloud Security Engineer — Identity, Crypto & Kubernetes

PagerDuty, Inc.; Atlanta (GA); Hybrid; USD 170,000 - 210,000; Full time

Job summary

PagerDuty, Inc. is seeking a Senior Security Engineer focused on Cloud Security (Platform, Identity & Cryptography). The role involves hardening AWS and Kubernetes environments, enforcing RBAC and policy controls, and leading encryption standards across a multi-account footprint.

Expect to shape security tooling and collaborate with AppSec and GRC teams. You will leverage SIEM and incident response practices, participate in on-call rotations, and contribute to automation with Terraform and

Qualifications

• 5+ years as a Security Engineer in an AWS-native, microservice SaaS environment.
• Deep, hands-on expertise securing Kubernetes and containerized environments - EKS, RBAC, Kubernetes admission control, network policy, and workload identity.
• Container runtime and image security experience; familiarity with a service mesh such as Istio strongly preferred.
• Strong, hands-on expertise in PKI and cryptography - certificate lifecycle/management, TLS/mTLS, key management and rotation (AWS KMS or similar HSM/KMS), and encryption-at-rest/in-transit standards.

Responsibilities

• Harden PagerDuty's AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP Moderate baselines across a multi-account, multi-org footprint.
• Harden EKS clusters and the Istio service mesh against CIS Kubernetes Benchmark and NSA/CISA hardening guidance.
• Design and enforce Kubernetes RBAC, least-privilege workload identity, and container supply-chain controls.
• Own PKI and encryption standards across the environment and define the standards other teams build against.
• Design and roll out SCP guardrails and least-privilege IAM/PAM across dozens of accounts and multiple orgs.
• Automate security controls as code using Terraform and Python - including Kubernetes policy-as-code.

Skills

Kubernetes security

AWS security services

PKI & cryptography

Container security

Istio service mesh

Tools

Istio

KMS

Secrets Manager

GuardDuty

CloudTrail

Config

Job description

PagerDuty, Inc. is seeking a Senior Security Engineer focused on Cloud Security (Platform, Identity & Cryptography). The role involves hardening AWS and Kubernetes environments, enforcing RBAC and policy controls, and leading encryption standards across a multi-account footprint.

Expect to shape security tooling and collaborate with AppSec and GRC teams. You will leverage SIEM and incident response practices, participate in on-call rotations, and contribute to automation with Terraform and