Cloud Security Engineer
Franklin Fitch · New York, New York, United States
FULL TIMEpermanent
Job Description
Position: Staff Cloud Security Engineer Salary: $280,000 – $320,000 total compensation Location: New York, NY (5 days in office)
Make sure to apply with all the requested information, as laid out in the job overview below.
Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?
This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.
This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale.
What you’ll be doing:Design and implement cloud security architecture across GCP (primary) and AWSWrite and own Terraform at scale, building reusable, secure infrastructure modulesArchitect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardeningDesign secure platform primitives rather than one-off controlsImplement logging, monitoring, and detection pipelines for cloud environmentsLead threat modelling and architecture reviews for new systemsAct as a technical leader, raising the bar through code reviews and system design
What we’re looking for:Strong platform / DevOps engineering background with a security focusDeep experience with Terraform, Kubernetes, Helm, and CI/CD pipelinesExperience working in GCP (preferred), AWS (acceptable), or Azure (workable)Proven track record of building secure cloud infrastructure, not just consuming toolsStrong understanding of IAM, networking, and distributed systems securityAbility to operate independently at staff level, owning technical directionComfortable working in high-performance, fast-paced environments xzbcwsv
Nice to have:Experience with Spacelift or similar IaC orchestration toolsFamiliarity with policy-as-code (OPA, etc.)Experience designing multi-account / multi-project cloud architecturesBackground in high-growth startups or infrastructure-heavy environments
What’s in it for you:Work on cutting-edge AI infrastructure used by top-tier financial institutionsJoin a high-talent-density team with strong engineering standardsReal ownership of cloud security strategy and architectureBuild systems where security is engineered—not enforcedExcellent benefits, daily meals, and a high-performance environment
Make sure to apply with all the requested information, as laid out in the job overview below.
Are you a deeply technical cloud engineer who enjoys building secure platforms from the ground up, not just reviewing tickets?
This is a staff-level, hands-on engineering role within a high-growth AI company redefining how the world’s top financial institutions operate. You’ll take ownership of cloud security architecture across a modern, multi-cloud environment (primarily GCP), embedding security directly into infrastructure, systems, and developer workflows.
This is not a traditional security role focused on tooling or ticketing (e.g. Wiz). It’s for engineers who build, automate, and design secure systems at scale.
What you’ll be doing:Design and implement cloud security architecture across GCP (primary) and AWSWrite and own Terraform at scale, building reusable, secure infrastructure modulesArchitect IAM, networking, and service-to-service security (mTLS, encryption, segmentation)Build and embed security guardrails into CI/CD pipelines (Spacelift, automation-first)Own Kubernetes security (GKE/EKS): RBAC, workload identity, cluster hardeningDesign secure platform primitives rather than one-off controlsImplement logging, monitoring, and detection pipelines for cloud environmentsLead threat modelling and architecture reviews for new systemsAct as a technical leader, raising the bar through code reviews and system design
What we’re looking for:Strong platform / DevOps engineering background with a security focusDeep experience with Terraform, Kubernetes, Helm, and CI/CD pipelinesExperience working in GCP (preferred), AWS (acceptable), or Azure (workable)Proven track record of building secure cloud infrastructure, not just consuming toolsStrong understanding of IAM, networking, and distributed systems securityAbility to operate independently at staff level, owning technical directionComfortable working in high-performance, fast-paced environments xzbcwsv
Nice to have:Experience with Spacelift or similar IaC orchestration toolsFamiliarity with policy-as-code (OPA, etc.)Experience designing multi-account / multi-project cloud architecturesBackground in high-growth startups or infrastructure-heavy environments
What’s in it for you:Work on cutting-edge AI infrastructure used by top-tier financial institutionsJoin a high-talent-density team with strong engineering standardsReal ownership of cloud security strategy and architectureBuild systems where security is engineered—not enforcedExcellent benefits, daily meals, and a high-performance environment
Details
| Company | Franklin Fitch |
| Location | New York, New York, United States |
| Type | FULL TIME |
| Niche | finance |
| Experience | permanent |