Senior Cloud Security Engineer (Cloud Security)

Location: Hybrid role based in San Jose or Austin, United States

Salary: $131,000–$245,000 per year

Company

hirify.global, an IBM company, develops infrastructure products that help organizations provision, secure, connect, and run infrastructure for applications. IBM Software builds cloud-native, AI-powered products and hybrid cloud solutions.

What you will do

• Design and implement cloud security architecture and engineering solutions across AWS, Azure, GCP, and other cloud environments.
• Build production-quality security tooling and automation with Go/Golang and Python.
• Design preventative security controls, automated guardrails, and secure-by-default infrastructure patterns with Terraform and Infrastructure as Code.
• Establish security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.
• Integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows while improving CSPM/CNAPP, vulnerability management, detection, and monitoring.
• Lead complex initiatives, conduct architecture reviews, research emerging cloud attack techniques, partner with engineering teams, and mentor engineers.

Requirements

• High School Diploma/GED required; a Bachelor’s Degree is preferred.
• Strong software engineering background in infrastructure, platform, cloud, or security engineering, including production systems and automation or tooling with Go/Golang or Python.
• Deep hands-on cloud security experience with AWS and/or Azure, including IAM, networking, compute/workloads, containers/Kubernetes, and cloud-native security controls.
• Strong Infrastructure as Code experience, preferably Terraform, including reusable secure infrastructure patterns and automated preventative controls.
• Experience integrating security into CI/CD and engineering workflows in Linux environments, including automated guardrails for secure-by-default deployments.
• Ability to lead complex cloud security initiatives across multiple engineering teams and communicate architecture, risks, and technical trade-offs.

Nice to have

• Experience with workload identity, OIDC federation, PKI, secrets management, and short-lived credential architectures.
• Experience building internal developer platforms, self-service infrastructure, paved roads, or automated security guardrails.
• Experience with CSPM or CNAPP platforms, cloud vulnerability management, security detection tooling, and Wiz.
• Experience securing infrastructure consistently across AWS, Azure, and GCP.
• Experience with policy-as-code, Terraform and CI/CD security controls, Kubernetes and containerized workloads.
• Knowledge of Zero Trust architecture, cloud governance, modern identity security, SOC 2, ISO 27001, and FedRAMP.

Culture & Benefits

• Full-time employment with hybrid work in San Jose or Austin.
• Healthcare, dental, vision, mental health, life insurance, disability coverage, and financial programs including 401(k) and pension benefits.
• Paid time off including 12 holidays, sick time, vacation, parental bonding leave, and other paid care leave.
• AI-driven learning resources, training, and industry-recognized certification opportunities.
• Inclusive employee resource groups, volunteer opportunities, and product and service discounts.
• Visa sponsorship is not available now or in the future; candidates must be able to work without current or future visa sponsorship.

Hiring process

• The position was posted on 29 October 2026 and is expected to remain open for 21 days or less if the role is filled.