Senior Security Operations Engineer II

SHPE Houston; Scottsdale, Northern (AZ, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

401k with match

Paid time off

Medical, Dental, Vision

Wellness support

Learning & Development

Snack-friendly offices

Job summary

Axon is hiring a Senior Security Operations Engineer II to build secure, scalable infrastructure and security tooling. The role focuses on securing Kubernetes platforms, container registries, and cloud infrastructure while enabling fast, secure software delivery.

You will automate vulnerability management, threat detection, and guardrails in CI/CD pipelines, partnering with engineering, SRE, and platform teams to strengthen defenses and developer productivity.

Qualifications

• 7+ years in infrastructure, platform, SRE, or security engineering.
• Hands-on with Kubernetes clusters and container registries in prod.
• Experience with PKI, secrets management, and encryption tech.
• Familiarity with IAM platforms and cloud-native security tools.
• Strong Linux, networking, and distributed systems knowledge.

Responsibilities

• Design, build, and run secure, scalable infrastructure and security platforms.
• Own Kubernetes security, RBAC, policy enforcement, and image security.
• Develop in-house security tooling for vulnerability mgmt and CMDB workflows.
• Provision and secure AWS infrastructure using IaC and cloud-native patterns.
• Enhance CI/CD with automated security tests and compliance checks.
• Collaborate with engineers to integrate security into fast-moving dev cycles.
• Investigate incidents, perform root cause analysis, and automate remediation.
• Improve observability with logging, metrics, and alerting for security.
• Maintain Runbooks, docs, and internal security tools for efficiency.

Skills

7+ years experience

Kubernetes security

Cloud security

Automation & SRE

CI/CD security

Infrastructure as Code

PKI & secrets management

IAM & access mgmt

Security tooling

Tools

EKS/AKS

ECR/ACR

KMS/Vault

HashiCorp Vault

Terraform

CI/CD tools

Job description

Join Axon and be a Force for Good.

At Axon, we're on a mission to Protect Life. We're explorers, pursuing society's most critical safety and justice issues with our ecosystem of devices and cloud software. Like our products, we work better together. We connect with candor and care, seeking out diverse perspectives from our customers, communities and each other.

Life at Axon is fast-paced, challenging and meaningful. Here, you'll take ownership and drive real change. Constantly grow as you work hard for a mission that matters at a company where you matter.

Your Impact

As a Senior Security Operations Engineer II, you will play a key role in building secure, reliable, and developer-friendly infrastructure that enables teams to move quickly without compromising security. You will solve complex technical challenges, improve system reliability through automation, and partner closely with engineering teams to scale security capabilities across the organization. In this role, you will design and develop security tools that support vulnerability management and secure software delivery pipelines, integrating security seamlessly into developer workflows. Your work will help reduce friction for developers while ensuring high standards for security, reliability, and operational efficiency across mission-critical systems.

What You'll Do

Location: This role is based out of our Scottsdale, AZ office and follows a hybrid schedule. We rely on in-person collaboration and ask that team members work onsite Tuesdays through Fridays, with the flexibility to work remotely on Mondays, unless there is an approved workplace accommodation. We believe that connection fuels innovation, and our in-office culture is designed to foster meaningful teamwork, mentorship, and shared success.

Reports to: Manager, InfoSec Engineering

Direct Reports: 0

• Design, build, and operate secure, scalable infrastructure and developer-friendly security platforms.
• Own the security and operational health of Kubernetes platforms and container registries, including cluster provisioning, upgrades, hardening, policy enforcement, image security, and ongoing operational support.
• Develop and maintain in-house tools for vulnerability management and CMDB lifecycle management, enabling asset discovery, tracking, and remediation workflows.
• Design, provision, and manage AWS infrastructure that supports enterprise security services using infrastructure-as-code and cloud-native architectures.
• Enhance CI/CD systems with automated security testing, compliance checks, and deployment safeguards.
• Implement and improve Kubernetes security practices, including workload protection, policy enforcement, cluster hardening, and runtime monitoring.
• Troubleshoot and resolve complex operational and system-level issues across environments.
• Partner with engineering, platform, and SRE teams to ensure security solutions fit fast-moving development cycles.
• Contribute to infrastructure-as-code and automation initiatives to enforce secure configuration and reduce manual drift.
• Continuously evaluate emerging threats and tooling to strengthen defenses and developer productivity.
• Build and improve security tooling that integrates into developer workflows, including in-house systems to manage vulnerabilities and the CMDB (Configuration Management Database).
• Provision, maintain, and secure Kubernetes platforms and container registries, ensuring clusters are resilient, compliant, and aligned with security best practices.
• Implement automated security checks and guardrails in CI/CD pipelines to detect and prevent vulnerabilities early.
• Provision and maintain secure AWS infrastructure to support security platforms and services, leveraging infrastructure-as-code and cloud-native best practices.
• Collaborate closely with developers and platform teams to design secure services, infrastructure, and deployment processes.
• Investigate security and infrastructure incidents, perform root cause analysis, and implement long-term remediation and automation.
• Enhance security observability through improved logging, metrics, and alerting to strengthen detection and response.
• Maintain and improve internal security tools, runbooks, and documentation to increase operational efficiency.

What You Bring

• 7+ years of experience in infrastructure, platform, SRE, or security engineering roles.
• Previous experience administering Kubernetes platforms (EKS and/or AKS) and container registries (ECR and/or ACR), including cluster provisioning, upgrades, networking, RBAC, policy enforcement, workload security, image management, and ongoing operations in production environments.
• Strong experience managing and securing Kubernetes clusters and containerized workloads in production environments.
• Hands-on experience with PKI platforms, certificate lifecycle management, secrets management, and encryption technologies.
• Experience operating cloud-native security solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, EJBCA, Smallstep, or Venafi.
• Strong understanding of Linux systems, networking, distributed systems, and Kubernetes security best practices.
• Experience with automation, scripting, Infrastructure-as-Code, and CI/CD pipelines for PKI and infrastructure operations.
• Familiarity with IAM and access management platforms such as Okta, Entra ID, Keycloak, or similar solutions.
• Experience with monitoring, logging, alerting, and troubleshooting distributed infrastructure and security systems.
• Strong communication and collaboration skills across engineering, operations, and security teams.
• Passion for building secure, scalable, and reliable infrastructure platforms.

Benefits that Benefit You

• Competitive salary and 401k with employer match
• Discretionary paid time off
• Paid parental leave for all
• Medical, Dental, Vision plans
• Fitness Programs
• Emotional & Mental Wellness support
• Learning & Development programs
• And yes, we have snacks in our offices

Benefits listed herein may vary depending on the nature of your employment and the location where you work.

Don't meet every single requirement? That's ok. At Axon, we Aim Far. We think big with a long-term view because we want to reinvent the world to be a safer, better place. We are also committed to building diverse teams that reflect the communities we serve.

Studies have shown that women and people of color are less likely to apply to jobs unless they check every box in the job description. If you're excited about this role and our mission to Protect Life but your experience doesn't align perfectly with every qualification listed here, we encourage you to apply anyways. You may be just the right candidate for this or other roles.

Important Notes

The above job description is not intended as, nor should it be construed as, exhaustive of all duties, responsibilities, skills, efforts, or working conditions associated with this job. The job description may change or be supplemented at any time in accordance with business needs and conditions.

Some roles may also require legal eligibility to work in a firearms environment.

We collect personal information from applicants to evaluate candidates for employment. You may request access, deletion, or exercise other CCPA rights at [e-mail] or via our Axon Privacy Web Form. For more information, please see the Your California Privacy Rights section of our Applicant and Candidate Privacy Notice.

Axon's mission is to Protect Life and is committed to the well-being and safety of its employees as well as Axon's impact on the environment. All Axon employees must be aware of and committed to the appropriate environmental, health, and safety regulations, policies, and procedures. Axon employees are empowered to report safety concerns as they arise and activities potentially impacting the environment.

We are an equal opportunity employer that promotes justice, advances equity, values diversity and fosters inclusion. We're committed to hiring the best talent - regardless of race, creed, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, genetic information, veteran status, or any other characteristic protected by applicable laws, regulations and ordinances - and empowering all of our employees so they can do their best work. If you have a disability or special need that requires assistance or accommodation during the application or the recruiting process, please email [e-mail]. Please note that this email address is for accommodation purposes only. Axon will not respond to inquiries for other purposes.

Phishing alert: Axon will never ask you to pay for any part of the hiring process, including training, equipment, or background checks. We do not make job offers via text message, WhatsApp, or instant messaging platforms without a formal interview process. All legitimate job openings are listed on our official careers page at https://www.axon.com/careers. If you receive a suspicious offer or outreach from an email address that is not @axon.com, or if you are asked for sensitive personal information (bank details, Social Security Number) prematurely, please ignore the message and report it to [e-mail].