Staff Cloud Security Engineer - Infra & Kubernetes Lead

Shopify; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

Shopify is seeking a Staff Security Engineer to lead the security of cloud infrastructure and production runtimes at scale. You will set direction across cloud platforms, IaC security, IAM, and Kubernetes, reducing risk while enabling engineers to ship quickly and securely.

You will drive security strategy, architect scalable controls, and mentor engineers through reviews and pairing. This role demands deep cloud security expertise, strong collaboration, and a bias for practical, repeatable

Qualifications

• Experience leading security for large-scale cloud environments.
• Ability to translate complex security concepts into practical controls.
• Experience with Kubernetes, IaC, and IAM design.
• Strong collaboration with engineering and product teams.

Responsibilities

• Define and drive security strategy for production runtimes.
• Architect and implement scalable security controls in production.
• Lead threat hunts, tabletop exercises, and incident reviews.
• Create repeatable security patterns and self-service tooling.
• Mentor engineers through reviews and guidance.
• Communicate security trade-offs to technical and non-technical partners.

Skills

Cloud security

Kubernetes security

IaC security

IAM

Threat hunting

Security reviews

Programming / coding

Communication

Leadership

Job description

Shopify is seeking a Staff Security Engineer to lead the security of cloud infrastructure and production runtimes at scale. You will set direction across cloud platforms, IaC security, IAM, and Kubernetes, reducing risk while enabling engineers to ship quickly and securely.

You will drive security strategy, architect scalable controls, and mentor engineers through reviews and pairing. This role demands deep cloud security expertise, strong collaboration, and a bias for practical, repeatable