Senior Cloud Security Engineer - Platform Governance

TP-Link Systems Inc.; Irvine (CA); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Free snacks and drinks

Fully paid medical, dental, and vision

401k contributions

Bi-annual reviews and pay raises

Health and wellness benefits incl. gym

Quarterly team-building events

Job summary

TP-Link Systems Inc. in Irvine, CA is seeking an experienced security architect to design governance for our cloud-native infrastructure and build platformized security capabilities.

You will implement automated security auditing, threat detection, and enforcement across the platform while collaborating with engineering and operations teams. The role requires 7+ years in infrastructure/security, hands-on AWS experience, and strong Linux knowledge.

Qualifications

• Bachelor’s degree or above in Computer Science, Software Engineering, Information Security, or related field.
• 7+ years of experience in infrastructure security, platform security, system security, or related areas.
• Hands-on experience with AWS is required, with solid practical knowledge of cloud infrastructure security design and governance.
• Strong software engineering and development capabilities, with the ability to independently design and build platform features and perform secondary development and enhancement on existing security or infrastructure platforms.
• Deep understanding of Linux systems, including host security, permissions, processes, file systems, and networking fundamentals.
• Strong understanding of security operations principles and engineering practices, including least privilege, access control, firewall policies, and network boundary isolation.
• Good understanding of common security attack techniques and risk scenarios, with the ability to analyze and mitigate them.
• Strong problem-solving skills and cross-functional collaboration abilities.

Responsibilities

• Design and implement a security governance framework for the cloud-native infrastructure platform.
• Build platformized security capabilities, including evaluation, integration, and adoption of security components.
• Design and develop automated security auditing platforms for automated checks, risk detection, and remediation workflows.
• Build security threat detection and alerting capabilities to improve identification, warning, and response.
• Participate in security design of cloud-native platforms and drive access control, network isolation, and host hardening.
• Define and optimize security policies, standards, and enforcement mechanisms based on least privilege and firewall policy management.
• Collaborate with infrastructure, architecture, engineering, and operations teams to embed security capabilities into the platform lifecycle.
• Stay up to date with attack techniques and defense practices to evolve governance and platform capabilities.

Skills

Strong communication

Cross-functional collaboration

Problem-solving

Education

Bachelor’s degree in CS/SE/Info Security

Tools

AWS

Linux

Job description

TP-Link Systems Inc. in Irvine, CA is seeking an experienced security architect to design governance for our cloud-native infrastructure and build platformized security capabilities.

You will implement automated security auditing, threat detection, and enforcement across the platform while collaborating with engineering and operations teams. The role requires 7+ years in infrastructure/security, hands-on AWS experience, and strong Linux knowledge.