Calix provides the cloud, software platforms, systems and services required for communications service providers to simplify their businesses, excite their subscribers and grow their value. We are seeking a highly skilled and experienced Staff Level Cloud Security Engineer to join our dynamic team, where you’ll lead efforts to build and maintain secure, scalable infrastructure that empowers engineers to innovate quickly and safely.
Responsibilities:
- Conduct regular security assessments and audits of cloud infrastructure and services
- Monitor and respond to security events and incidents in cloud environments
- Develop and maintain cloud security policies, standards, and procedures
- Stay current with emerging cloud security threats and mitigation strategies
- Develop and maintain Infrastructure as Code (IaC) - Terraform templates with embedded security controls
- Implement, manage, and monitor endpoint security solutions in cloud environments, including tools such as Cortex XDR and SentinelOne
- Configure, manage, and troubleshoot cloud-based firewall technologies
- Apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments
- Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines
- Provide technical leadership and mentorship to junior engineers, fostering a culture of continuous learning and improvement
Requirements:
- Bachelor's degree in computer science, Information Technology, or a related field (or equivalent experience)
- 7+ years of experience in Cloud Infrastructure, Platform Engineering, or similar roles
- 5+ years of experience with security engineering, computer and network security and security protocols
- Deep understanding of cloud-native architectures, microservices, and distributed systems
- Experience securing CI/CD pipelines, deployment automation, and internal tooling
- Strong communication skills, with the ability to explain complex technical concepts to non-technical stakeholders
- Proficiency in cloud platforms in Google Cloud Platform or AWS. (GCP preferred)
- Relevant GCP certifications (e.g., Google Professional Cloud Security Engineer) are highly desirable