Cloud Security Engineer

💼 Position: Staff Cloud Security Engineer

💵 Salary: $280,000 – $320,000 total compensation

🌍 Location: New York, NY (5 days in office)

Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?

This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.

This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale.

What you’ll be doing:

• Design and implement cloud security architecture across GCP (primary) and AWS
• Write and own Terraform at scale, building reusable, secure infrastructure modules
• Architect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)
• Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)
• Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardening
• Design secure platform primitives rather than one-off controls
• Implement logging, monitoring, and detection pipelines for cloud environments
• Lead threat modelling and architecture reviews for new systems
• Act as a technical leader, raising the bar through code reviews and system design

What we’re looking for:

• Strong platform / DevOps engineering background with a security focus
• Deep experience with Terraform, Kubernetes, Helm, and CI/CD pipelines
• Experience working in GCP (preferred), AWS (acceptable), or Azure (workable)
• Proven track record of building secure cloud infrastructure, not just consuming tools
• Strong understanding of IAM, networking, and distributed systems security
• Ability to operate independently at staff level, owning technical direction
• Comfortable working in high-performance, fast-paced environments

Nice to have:

• Experience with Spacelift or similar IaC orchestration tools
• Familiarity with policy-as-code (OPA, etc.)
• Experience designing multi-account / multi-project cloud architectures
• Background in high-growth startups or infrastructure-heavy environments

What’s in it for you:

• Work on cutting-edge AI infrastructure used by top-tier financial institutions
• Join a high-talent-density team with strong engineering standards
• Real ownership of cloud security strategy and architecture
• Build systems where security is engineered—not enforced
• Excellent benefits, daily meals, and a high-performance environment

e.dickinson@franklinfitch.com

1 212 970 7603