Security Software Engineer, IAM
Own IAM strategy and architecture across corporate and production environments. Migrate Okta to Terraform, enforce least-privilege access, and drive automation for provisioning and device management.
Security Engineer, Cloud
Security Engineer building and hardening cloud-native security controls, infrastructure-as-code, and CI/CD pipelines for a scalable platform. Requires 8+ years in infrastructure/platform security and deep expertise in AWS/GCP and Kubernetes.
208k – 312kUnited StatesSecurity EngineeringRemote8+ YOE
About the role
What you will do
- Design and implement scalable security controls across our cloud-native platform.
- Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation.
- Build secure by default infrastructure and code CI/CD pipelines.
- Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows.
- Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience.
- Conduct threat modeling, risk analysis, and mitigation planning for critical systems.
- Drive improvements in monitoring, detection, and incident response at the platform level.
- Build, deploy and maintain relevant tooling.
About you
- 8+ years of experience in infrastructure or platform security roles.
- Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening.
- Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security.
- Skilled at balancing engineering realities with principled security practices.
- Proven track record of shipping secure, resilient systems at scale.
Bonus if you
- Have built or scaled security automation pipelines.
- Contributed to open-source security projects or tools.
- Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP.
- Hold a bachelors or masters degree in Cybersecurity or similar disciplines.
Benefits
- Competitive compensation package, including equity.
- Inclusive Healthcare Package.
- Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
- Flexible Time Off.
- We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
Skills
AWSGCPTerraformCdkKubernetesCI/CDIdentity And Access ManagementThreat ModelingIncident ResponseSecurity Automation
Similar roles
Security Engineering jobsSr. Engineering Manager, Application Security
Senior Engineering Manager leading Application Security squad to build secure software by default through threat modeling, design reviews, vulnerability management, and developer tooling. Requires hands-on team leadership and expertise across the AppSec stack.
Senior Software Engineer, Fraud
Build and operate AI-powered fraud and abuse detection systems on Replit's agentic platform. Design LLM guardrails, ML classifiers, and automated response mechanisms to combat phishing, cryptomining, and platform exploitation.
Senior Software Engineer, Risk
Build and operate AI-powered abuse detection and response systems to protect Replit's platform from phishing, cryptomining, fraud, and LLM-specific attacks. Requires 4+ years in security/anti-abuse and strong Python/TypeScript + SQL skills.