Staff Cloud Security Architect (Multi-Cloud)

Franklin Fitch; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Daily meals

Excellent benefits

Job summary

Franklin Fitch is seeking a Staff Cloud Security Engineer for a hands-on role in New York, NY (5 days in office). You will own cloud security across a modern, multi-cloud environment (primarily GCP), embedding security into infrastructure, systems, and developer workflows.

This is not a ticket-focused role; it targets engineers who build, automate, and design secure systems at scale. You will lead security architecture and guardrails across IAM, networking, and Kubernetes, shaping platform

Qualifications

• Deep cloud engineering background with a security focus.
• Proven experience building secure cloud infrastructure, not just consuming tools.
• Strong IAM, networking, and distributed systems security knowledge.
• Ability to operate independently at staff level and own technical direction.
• Experience with multi-cloud environments, primarily GCP.

Responsibilities

• Design and implement cloud security architecture across GCP (primary) and AWS.
• Write and own Terraform modules at scale for reusable, secure infrastructure.
• Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation).
• Embed security guardrails into CI/CD pipelines (Spacelift, automation-first).
• Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening.
• Design secure platform primitives and not just one-off controls.
• Implement logging, monitoring, and detection pipelines for cloud environments.
• Lead threat modelling and architecture reviews for new systems.
• Act as a technical leader through code reviews and system design.

Skills

DevOps engineering

Cloud security

Threat modelling

Infrastructure as code

Independent ownership

Tools

Terraform

Kubernetes

Helm

Spacelift

OPA

Job description

Franklin Fitch is seeking a Staff Cloud Security Engineer for a hands-on role in New York, NY (5 days in office). You will own cloud security across a modern, multi-cloud environment (primarily GCP), embedding security into infrastructure, systems, and developer workflows.

This is not a ticket-focused role; it targets engineers who build, automate, and design secure systems at scale. You will lead security architecture and guardrails across IAM, networking, and Kubernetes, shaping platform