Staff Cloud Security Engineer: IAM, Secrets & Cloud Defense

Speedrun Talent Network; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Health benefits

Cutting-edge AI work

Transparent culture

Job summary

Arena Intelligence is hiring a staff-level cloud security engineer to design and enforce security for its cloud infrastructure. You will define workload identity, secrets rotation, and access controls across services.

You will partner with platform and product teams to embed security into infrastructure, pipelines, and deployments, while hands-on engineering remains central to the role. This onsite SF role reports to the Head of Security.

Qualifications

• 6+ years in security or infrastructure engineering, with 3+ in cloud security.
• Hands-on experience securing AWS, GCP, and Cloudflare at keyboard level.
• Ownership of cloud security decisions, IAM design, and secrets management.

Responsibilities

• Design workload identity for cloud workloads and implement least-privilege IAM.
• Own machine secrets lifecycle, from central secret store to rotation.
• Set reachability rules for environments and services, including outbound limits.

Skills

Cloud security

IAM design

Secrets rotation

Terraform

Python

Go

TypeScript

CI/CD security

Security detections

Risk judgment

Automation

Tools

AWS

GCP

Cloudflare

Terraform

GitHub Actions

Job description

Arena Intelligence is hiring a staff-level cloud security engineer to design and enforce security for its cloud infrastructure. You will define workload identity, secrets rotation, and access controls across services.

You will partner with platform and product teams to embed security into infrastructure, pipelines, and deployments, while hands-on engineering remains central to the role. This onsite SF role reports to the Head of Security.