Senior Security Engineer - Cloud Security
Core
Build and operate security-focused systems at scale to protect PagerDuty's multi-account AWS environment and Kubernetes platforms, including container security, identity & access management, and cryptography.
Role type
Senior Security Engineer (Cloud Security, Kubernetes & Identity)
Builds
Security-focused platforms, services, and automation tools (Python/Go, Terraform, policy-as-code) that reduce manual work and enable secure operations for 30+ engineering teams.
Domain
Cloud Security, Kubernetes, Identity & Access Management (IAM), Cryptography
Required skills
Python, Go, Terraform, Kubernetes (EKS), Istio, AWS Security Services (IAM, KMS, GuardDuty, Config), CIS Benchmarks, DISA STIGs, FedRAMP compliance, Incident Response, SIEM (CrowdStrike/Splunk), Threat Hunting
Preferred skills
PKI and cryptography (TLS/mTLS, key rotation), NIST CSF/SOC 2/ISO 27001, AppSec/GRC partnership, AI/ML workload security, Wiz, CrowdStrike Falcon, Azure Entra ID/Defender
Technologies
AWS, Kubernetes, EKS, Istio, Terraform, Python, Go, CrowdStrike NG-SIEM, Splunk, OPA/Gatekeeper, Kyverno, AWS KMS, Secrets Manager
Responsibilities
Harden AWS and Kubernetes environments against CIS/DISA/FedRAMP baselines; Own end-to-end Kubernetes and container security (RBAC, workload identity, supply chain); Build and operate security automation platforms; Own PKI and encryption standards; Design and roll out SCP guardrails and least-privilege IAM/PAM; Shape detection strategy and conduct threat hunting for Kubernetes/Istio and identity; Participate in on-call rotation and act as Incident Commander; Mentor teammates on security practices.
Seniority
Senior, hands-on IC
