Senior Software Engineer II, Cloud Security

Qualia; United States; Remote; USD 170,000 - 250,000; Full time

Job summary

Qualia is seeking a Senior Cloud Security Engineer to build and operate secure production cloud systems handling sensitive financial and identity data. You will be a hands-on senior IC on a compact security team, shaping reusable security patterns and collaborating with infrastructure, reliability, and application security teams to bridge software and operations.

You will implement IAM, network, and encryption controls in Terraform, strengthen Kubernetes security, and develop guardrails and

Qualifications

• Experience securing AWS in production with IAM, account organization, network design, encryption, and logging.
• Hands-on Kubernetes security across access control, network policy, admission, workload identity, runtime, and container images.
• Proficiency with Terraform or similar IaC and ability to write production-grade Go services or automation.
• Experience building security guardrails and detections integrated into engineering workflows.
• Strong written communication and collaboration across security, platform, and reliability teams.

Responsibilities

• Strengthen cloud account structure, IAM roles, network segmentation, and encryption controls using infrastructure code and Go.
• Secure Kubernetes through admission policies, RBAC, network controls, workload identity, runtime safeguards, and image hardening.
• Create reusable, hardened infrastructure modules and CI policy checks to simplify secure configurations.
• Develop and tune detections using cloud audit trails, Kubernetes logs, and runtime signals; build supporting services and data pipelines.
• Automate posture checks and access reviews, prioritize findings, and help teams resolve them.
• Protect deployment pipelines and credentials, and contribute to cloud incident response and security reviews.

Skills

AWS IAM

Kubernetes security

Terraform

Go programming

Cloud security engineering

Tools

Terraform

Go

Kubernetes

Job description

Role overview

Build the code and infrastructure that secure production cloud systems carrying sensitive financial and identity data. As a senior individual contributor on a small cloud security team, you will shape patterns used across engineering, working closely with infrastructure and reliability teams and partnering with application security where software and infrastructure meet. The work is hands-on, spanning reusable infrastructure, automated policy enforcement, detection, and response.

Responsibilities

• Strengthen cloud account structure, identity and access roles, network segmentation, and encryption controls using infrastructure code and Go.
• Secure Kubernetes through admission policies, role-based access, network controls, workload identity, runtime safeguards, and maintained container images.
• Create reusable, hardened infrastructure modules and continuous‑integration policy checks that make secure configurations straightforward to adopt.
• Develop and tune detections using cloud audit trails, Kubernetes logs, and runtime signals; build supporting services and data pipelines.
• Automate posture checks and access reviews, prioritize findings, and help teams resolve them.
• Protect deployment pipelines and credentials, and contribute to cloud incident response and security reviews.

Requirements

• Strong experience securing AWS in production, including IAM, account organization, network design, encryption, and logging.
• Practical Kubernetes security experience across access control, network policy, admission, workload identity, runtime, and container images.
• Proficiency with Terraform or comparable infrastructure-as-code tools and the ability to write production-quality Go services or automation.
• Experience building security guardrails and detections that integrate into engineering workflows.
• Clear written communication and the ability to collaborate across security, platform, and reliability teams.

Nice to have

• Background in regulated or high‑liability environments, cloud incident response or detection engineering, or using language models and agents for security analysis.

Benefits and work setup

Remote‑first organization. The environment is centered on AWS and Kubernetes, with infrastructure defined in Terraform and security tooling written in Go.