Identity & Access Management

• Design and improve authentication and authorization systems across services
• Implement strong service-to-service identity and least-privilege access patterns
• Improve access controls across infrastructure and internal systems

Secrets & Key Management

• Build and maintain systems for securely managing secrets, tokens, and credentials
• Improve rotation, auditing, and access controls
• Reduce secret sprawl and integrate secure patterns into developer workflows

Cloud & Infrastructure Security

• Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability
• Improve network boundaries, service segmentation, and access controls
• Embed security into infrastructure-as-code and deployment systems

Engineering Partnership

• Work closely with product and infrastructure teams to design secure systems from the ground up
• Review architecture and code for security risks and provide actionable guidance
• Identify patterns in risks and drive cross-cutting improvements

You May Be a Fit If:

Core Experience

• You have experience securing cloud-native infrastructure and distributed systems in production
• You have a background in infrastructure, backend, or security engineering
• You’ve worked in multi-tenant or high-scale environments

Technical Depth

• You have a strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar)
• You’ve designed or secured isolation mechanisms in multi-tenant systems
• You have a solid understanding of authentication, authorization, and service identity models
• You have experience with secrets management and secure handling of credentials
• You have a strong foundation in networking concepts (segmentation, service communication, access boundaries)

Mindset

• You have a builder mentality: you design and implement, not just review
• You take a pragmatic approach to security in fast-moving environments
• You’re comfortable working deeply with engineers and influencing system design

Nice-to-Have:

• Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar)
• Familiarity with kernel-level or low-level isolation primitives
• Experience securing Kubernetes or similar orchestration systems in production
• Background in developer infrastructure, compute platforms, or multi-tenant systems

Compensation: $150K - $270K