Role Overview
We’re hiring experienced engineers with a security mindset to expand our tooling, add new guardrails, and partner with Aura teams on secure design.
Responsibilities
- Develop cloud-native controls in Azure, AWS and/or GCP to enforce the security baseline at scale, integrating with open-source and vendor tools as needed.
- Enhance product security along the software development lifecycle by creating paved roads and defining additional security and software excellence requirements for containerised services running on multiple managed Kubernetes clusters.
- Act as a subject matter expert for the Platform and Engineering teams by providing guidance on cloud and k8s services, secure infrastructure‑as‑code, modern secure AuthZ/AuthN techniques (SPIFFE) and secrets management solutions.
- Collaborate with other teams to define and implement Cloud/K8s native policies and procedures (Kyverno, Pod Security Standards).
- Conduct security assessments, audits and architecture reviews in order to introduce new cloud controls in the platform and make recommendations to improve the overall security posture.
- Support the incident detection and response process by maintaining cloud monitoring and alerting tooling and developing scripts needed for troubleshooting and resolution of incidents and security issues.
Ideal Candidate
- Experience with Containers, Kubernetes, Infrastructure‑as‑Code and programming languages such as Go, Java and/or Python.
- Proven experience in a security engineering role with hands‑on technical involvement, and exposure to decision making processes.
- An active interest and background in Cloud, Infrastructure and/or Network security.
- Proven track record with cloud‑native authentication mechanisms (OIDC, OAuth2), secrets management, admission controllers, service mesh, mTLS and cloud based IAM solutions.
- Familiarity with securing and hardening K8s clusters, containerised applications and Linux hosts.
- Demonstrated ability to architect cloud‑native applications including the design of APIs and microservices on containers.
