Staff Security Engineer – Platform Security

Colossus Technologies Group; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

Colossus Technologies Group is partnering with a high-tech fintech company to hire a Staff Security Engineer focused on building security foundations for a large-scale cloud production environment. This is not a traditional security role; the team builds production-grade security services and internal platforms that protect cloud infrastructure while keeping engineering momentum.

The ideal candidate has deep software engineering skills (Python/Go), strong AWS and Kubernetes experience, and the

Qualifications

• Strong software engineering ability is important.
• Python and Go are particularly relevant, along with deep AWS experience and an understanding of Kubernetes, Terraform and distributed production systems.
• Engineers who have built cloud security platforms, IAM or authorization systems, or security tooling are ideal.

Responsibilities

• Build production security services and internal platforms for cloud infrastructure without slowing down engineering teams.
• Develop IAM/RBAC and least-privilege authorization systems across AWS and Kubernetes.
• Create automated guardrails that prevent dangerous infrastructure changes from reaching production.
• Advance Kubernetes security tooling including admission controls, network policies, and runtime protection.

Skills

Python

Go

AWS

Kubernetes

IAM

RBAC

Security architecture

Tools

Terraform

CI/CD pipelines

Job description

Staff Security Engineer – Platform Security

Colossus Technologies Group is working with a high-tech fintech company to hire a Staff Security Engineer focused on building the security foundations behind a large-scale cloud production environment.

This isn't a traditional cloud security or DevSecOps role centered around configuring security products, reviewing infrastructure changes or managing compliance controls.

We're looking for a security engineer who builds.

The team is working on:

• Building production security services and internal platforms that protect cloud infrastructure without slowing down engineering teams
• Engineering identity and authorization systems around IAM, RBAC and least privilege across a large AWS and Kubernetes environment
• Building automated security guardrails that identify and prevent dangerous infrastructure changes before they reach production
• Developing Kubernetes security capabilities around admission controls, workload isolation, network policies, container security and runtime protection
• Building systems that continuously identify cloud vulnerabilities and misconfigurations, understand their actual risk and automate remediation
• Engineering security controls directly into Terraform, CI/CD and developer workflows so secure infrastructure becomes the default
• Building tooling around software supply chain security, container images, signing, provenance and the path from code through production
• Designing security infrastructure that has to meet the same availability, scalability and reliability standards as the production systems it protects

We're interested in engineers who have built cloud security platforms, IAM or authorization systems, Kubernetes security tooling, vulnerability management platforms, policy engines, automated remediation systems or other production security services.

Strong software engineering ability is important. Python and Go are particularly relevant, along with deep AWS experience and an understanding of Kubernetes, Terraform and distributed production systems.

The ideal person understands cloud security deeply enough to identify the problem and has the software engineering ability to design, build, deploy and operate the solution themselves.