Senior Cloud Security Engineer – Kubernetes & PKI (Hybrid)

Pager; Atlanta (GA); On-site; USD 150,000 - 252,000; Full time

Benefits offered by this job

Company equity

ESPP

Retirement plan

Paid vacation time

Paid holidays

Wellness days

Parental leave

Volunteer time off

Mental wellness programs

Job summary

PagerDuty, Inc. seeks a Senior Security Engineer to lead cloud security across multi-account AWS and Kubernetes, focusing on identity, cryptography, and secure-by-default platform controls. This role partners with 30+ engineering teams to ship controls as code without slowing delivery, including FedRAMP footprint.

The position offers a hybrid work model with Atlanta-based days in the office and opportunities to shape detection strategy, IAM, PKI, and encryption standards across the environment.

Qualifications

• 5+ years as a Security Engineer in an AWS-native SaaS environment.
• Hands-on security in Kubernetes/EKS and containerized environments.
• Strong PKI, encryption, and key-management experience.
• Experience with Infrastructure as Code and automation—Terraform and Python.
• Familiarity with FedRAMP or similar security attestations.
• Ability to partner with AppSec and GRC teams to align controls and produce evidence.

Responsibilities

• Harden PagerDuty's AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP baselines across a multi-account, multi-org footprint.
• Harden EKS clusters and the Istio service mesh against benchmarks and hardening guidance.
• Design and enforce Kubernetes RBAC, least-privilege workload identity, and container supply-chain controls.
• Own PKI and encryption standards across the environment, including TLS/mTLS and KMS-based rotation.
• Design and roll out SCP guardrails and least-privilege IAM/PAM across dozens of accounts.
• Leverage AI tooling to automate security tasks like posture triage, threat modeling, and evidence generation.
• Define detection coverage and perform threat hunting for container, identity and cryptography threats.
• Participate in on-call rotation, triage cloud/Kubernetes alerts, and act as Incident Lead during incidents.
• Automate security controls as code using Terraform and Python; integrate Kubernetes policy-as-code.
• Collaborate with AppSec and GRC teams to translate controls into audit evidence.
• Mentor teammates on platform/identity/cryptography security and contribute to roadmap and planning.

Skills

AWS security

Kubernetes security

PKI & encryption

Terraform & Python

Incident response

Threat modeling

IAM / PAM

RBAC design

Automation as code

Audit & compliance

Tools

Terraform

Python

Istio

EKS

Kubernetes

AWS IAM

KMS

GuardDuty

CloudTrail

Config

Job description

PagerDuty, Inc. seeks a Senior Security Engineer to lead cloud security across multi-account AWS and Kubernetes, focusing on identity, cryptography, and secure-by-default platform controls. This role partners with 30+ engineering teams to ship controls as code without slowing delivery, including FedRAMP footprint.

The position offers a hybrid work model with Atlanta-based days in the office and opportunities to shape detection strategy, IAM, PKI, and encryption standards across the environment.