Senior Software Engineer II, Cloud Security (AWS/Kubernetes)

Location: Based in Austin, Texas, with remote possibilities for qualified candidates; hybrid option available for those living nearby. Other listed locations: Concord, New Hampshire, and San Francisco, California, United States.

Company

hirify.global provides B2B real estate technology and a shared digital closing platform for homebuyers, sellers, lenders, title and escrow agents, and real estate agents.

What you will do

• Design and implement AWS account structures, IAM roles, permission boundaries, network segmentation, and KMS usage using Terraform and Go.
• Secure Kubernetes through admission policies, RBAC, network policies, workload identity, runtime controls, and patched container images.
• Build reusable infrastructure-as-code modules, CI policy checks, cloud detections, Go services, and pipelines integrated with InfoSec's SIEM.
• Implement just-in-time access, short-lived credentials, and secrets management for humans, services, and CI.
• Develop and operate Go-based posture checks across AWS accounts and container images, automating recurring remediation.
• Investigate cloud alerts, handle the infrastructure side of incidents, review infrastructure changes, and collaborate with SRE, Platform, Application Security, and product engineering.

Requirements

• 6+ years in cloud security, infrastructure, SRE, or platform engineering, including at least 3 years securing production cloud environments.
• Deep hands-on AWS experience with IAM policy evaluation, Organizations, VPC and private connectivity, KMS, CloudTrail, and GuardDuty or an equivalent.
• Production Kubernetes security experience with RBAC, admission control, network policy, pod security, and workload authentication to cloud APIs.
• Strong Terraform or similar infrastructure-as-code experience, including writing and reviewing modules and building guardrails used by other teams.
• Ability to write production code; Go is preferred, while Python or TypeScript is acceptable with readiness to work in Go.
• Ability to explain attack paths from leaked credentials or compromised pods to sensitive data and define detection for each step.
• Clear, direct technical writing for actionable findings and design documents that withstand review.
• Relevant stack includes AWS, some Azure, limited GCP, Kubernetes, Terraform, Okta, NodeJS, TypeScript, MongoDB, ClickHouse, Grafana, and Go.

Nice to have

• Experience in fintech, real estate technology, or another regulated, high-liability domain.
• Cloud penetration testing, red team, or DFIR experience.
• Supply chain security experience with artifact signing, SBOMs, or SLSA-style provenance in CI/CD.
• Open-source security tooling, published research, or conference talks.

Culture & Benefits

• Remote-first development organization with fully remote support, an Austin office, and flexible hybrid work nearby.
• Health plans, a 401k program, commuter benefits, parental leave, professional development, and flexible time off.
• Online onboarding, biweekly all-hands meetings, and internal virtual events.
• Equal-opportunity workplace focused on diverse perspectives and an inclusive environment.