Staff Cloud Security Architect: AWS/GCP, Terraform, CI/CD

ScOp Venture Capital LLC.; New York (NY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Rogo in New York is hiring a Staff Cloud Security Engineer to lead cloud security design across AWS and GCP. This role is hands-on, writing production code, building secure primitives, and embedding security into the platform.

You will own Terraform modules, IAM models, network segmentation, and secure service-to-service communication, while mentoring engineers and driving security decisions with technical authority.

Qualifications

• Strong background designing secure clouds on AWS and GCP.
• Hands-on Terraform module design and large-scale state management.
• Experience with Kubernetes security (GKE/EKS) and RBAC.
• Ability to implement policy-as-code and guardrails.

Responsibilities

• Architect and implement cloud security foundations across AWS and GCP.
• Author Terraform-based security architecture at scale, including modules for IAM, networking, logging, and encryption.
• Design and operate cloud identity systems at scale, workload identity, service accounts, and cross-cloud access patterns.
• Lead the security design of cloud networking, including VPC architecture, private connectivity, egress control, firewalling, and isolation boundaries.
• Build and maintain security automation across CI/CD and cloud environments.
• Own Kubernetes and container security for production workloads (GKE/EKS), including cluster hardening and runtime controls.
• Define and implement logging, monitoring, and detection pipelines for cloud security posture and incidents.
• Perform threat modeling and architectural reviews for new infrastructure and platform changes.
• Act as a technical multiplier: mentoring engineers and raising the security bar.

Skills

Terraform

IAM

Cloud security

GCP

AWS

Kubernetes

RBAC

Networking

Security automation

Policy as code

Tools

Terraform

GKE

EKS

OPA

Job description

Rogo in New York is hiring a Staff Cloud Security Engineer to lead cloud security design across AWS and GCP. This role is hands-on, writing production code, building secure primitives, and embedding security into the platform.

You will own Terraform modules, IAM models, network segmentation, and secure service-to-service communication, while mentoring engineers and driving security decisions with technical authority.