Franklin Fitch

Cloud Security Engineer

New York, NY

Published · Expires (UTC)

Full-time

About this opportunity

đź’Ľ Position: Staff Cloud Security Engineer

💵 Salary: $280,000 – $320,000 total compensation

🌍 Location: New York, NY (5 days in office)

Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?

This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.

This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale.

What you’ll be doing:

  • Design and implement cloud security architecture across GCP (primary) and AWS
  • Write and own Terraform at scale, building reusable, secure infrastructure modules
  • Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)
  • Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)
  • Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening
  • Design secure platform primitives rather than one-off controls
  • Implement logging, monitoring, and detection pipelines for cloud environments
  • Lead threat modelling and architecture reviews for new systems
  • Act as a technical leader, raising the bar through code reviews and system design

What we’re looking for:

  • Strong platform / DevOps engineering background with a security focus
  • Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines
  • Experience working in GCP (preferred), AWS (acceptable), or Azure (workable)
  • Proven track record of building secure cloud infrastructure, not just consuming tools
  • Strong understanding of IAM, networking, and distributed systems security
  • Ability to operate independently at staff level, owning technical direction
  • Comfortable working in high-performance, fast-paced environments

Nice to have:

  • Experience with Spacelift or similar IaC orchestration tools
  • Familiarity with policy-as-code (OPA, etc.)
  • Experience designing multi-account / multi-project cloud architectures
  • Background in high-growth startups or infrastructure-heavy environments

What’s in it for you:

  • Work on cutting-edge AI infrastructure used by top-tier financial institutions
  • Join a high-talent-density team with strong engineering standards
  • Real ownership of cloud security strategy and architecture
  • Build systems where security is engineered—not enforced
  • Excellent benefits, daily meals, and a high-performance environment

+1 212 970 7603

Your next step

Interested in this role?

Review the details, then choose the resume you want to share.

Apply for this job Free for job seekers. Always.

Share this job

Report a job
About the employer

Franklin Fitch

Related opportunities

Explore current openings connected to this search.

Your next opportunity

Create a job alert

Receive new jobs matching these criteria.

Information Security EngineersNew York, NY · Within 15.5 mi · Information Technology (IT), Full-Time Jobs
Free for job seekers. Always.
You’re in control

Manage your alerts or unsubscribe at any time.

Manage job alerts
Your preferred city

Where would you like to work?

Choose a city to personalize your search.

Location is requested only when you choose this option. Precise coordinates are not stored.

Privacy choices

Essential cookies keep sign-in, security, and your selected preferences working. With your permission, optional cookies measure sessions and return visits for up to 30 days. Recent searches and viewed jobs stay on this browser for 14 days and help you continue your search. Clear them from your recent activity panel. You can change your choice at any time.

You have not made a choice yet. Optional analytics are off.

Privacy policy

Quick view