Staff Software Engineer (Security Engineering)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Staff Software Engineer (Security Engineering): Designing and building security guardrails for a multi-cloud environment with an accent on programmatic, code-driven policies and IAM. Focus on automating cloud security controls, architecting least-privilege boundaries, and defining network security standards.
Location: Must be based in the US (Bellevue, Chicago, New York, or Washington, DC) and hold U.S. Person status
Salary: $174,000 — $239,000 USD
Company
is a leader in identity security, providing the trusted, neutral infrastructure required to secure both AI and human identities.
What you will do
- Design organization-wide cloud security controls (SCPs, Azure Policy) to provide protection with minimum developer friction.
- Architect IAM templates and permission boundaries governed by the principle of least privilege.
- Define security standards for VPC architecture, edge networking, and cross-account connectivity.
- Lead platform-related security reviews for new features and high-impact services to ensure security is integrated into the design phase.
- Design systems and processes to validate the security posture of the platform in real-time.
- Mentor junior engineers and influence senior leadership on critical security decisions.
Requirements
- 8+ years of experience in information security, specifically within cloud-native environments and Kubernetes (EKS, AKS).
- Deep understanding of secure networking principles, including VPC peering, transit gateways, VPNs, and PKI infrastructure.
- Strong background in building automated controls for enforcing Policy-as-Code within Terraform workflows.
- Experience identifying attack vectors and conducting risk assessments for complex, distributed systems.
- Bachelor's degree in Computer Science, Information Security, Systems Engineering, or a related field.
- Must be a U.S. Person (U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee) to access federal environments.
Nice to have
- Experience navigating compliance frameworks such as FedRAMP, SOC2, or HIPAA.
- Proficiency in Python, Go, or JavaScript for automation and tooling.
- Experience creating and securing containerized environments and service mesh (Istio) security policies.
Culture & Benefits
- Comprehensive health, dental, and vision insurance.
- 401(k) retirement plan and flexible spending accounts.
- Paid leave, including PTO and parental leave.
- Immersive in-person onboarding experience to accelerate impact and connection.
- Access to a global community spanning over 20 offices worldwide.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →