Senior Cloud Security Engineer

About the role

We’re hiring a Senior Cloud Security Engineer to strengthen and lead cloud security across Pixieset’s AWS, Cloudflare, and Kubernetes environments. In this hands‑on role you’ll establish secure infrastructure patterns, embed practical guardrails into how we build and deploy, and help teams identify and address cloud risks effectively.

Key responsibilities

• Design and improve security guardrails across AWS organization, accounts, networks, and IAM.
• Define and implement security standards for Kubernetes, containers, secrets, credentials, and encryption.
• Own and improve edge security controls on Cloudflare, including DNS, WAF, abuse prevention, and Zero Trust access.
• Embed security into infrastructure‑as‑code workflows and CI/CD pipelines.
• Manage cloud security posture platform, triage, risk prioritization, and remediation workflows.
• Strengthen cloud logging, monitoring, threat detection, and incident response readiness.
• Develop automation and reusable security controls for secure infrastructure.
• Partner with DevOps and Engineering teams to evaluate cloud architecture and implement secure defaults.

Required profile

• 5+ years of experience in software engineering, cloud engineering, infrastructure, DevOps, or a related technical role within a SaaS environment.
• 3+ years of experience in cloud security, infrastructure security, or a related engineering role.
• Strong hands‑on experience securing production workloads in AWS, including IAM, networking, logging, and native security services.
• Experience securing Kubernetes and containerized environments, as well as edge infrastructure using Cloudflare or similar platforms.

Required skills

• AWS (IAM, networking, logging, native security services)
• Kubernetes and containers
• Cloudflare (DNS, WAF, Zero Trust)
• Infrastructure‑as‑Code tools: CloudFormation, CDK, Terraform
• CNAPP/CSPM platforms (Wiz, Prisma Cloud)
• Cloud threat detection, vulnerability management, incident investigation
• Python, Go, Bash scripting
• CI/CD pipeline integration

What we offer

• Hybrid work environment (2 in‑office days per week)
• 4 weeks of annual vacation plus paid holidays
• RRSP matching and health & lifestyle spending account
• Annual education budget and charitable donation matching
• Comprehensive benefits including extended health, critical illness, long‑term disability and life insurance
• Company‑issued MacBook and home office budget