Staff Cloud Security Engineer, Cloud Platform

Calix is a company focused on transforming Communication Service Providers' businesses through innovative cloud solutions. They are seeking a highly skilled Staff Cloud Security Engineer to lead efforts in building and maintaining secure cloud infrastructure, while collaborating with cross-functional teams to drive innovation in their network architecture.

Responsibilities:

• Conduct regular security assessments and audits of cloud infrastructure and services
• Monitor and respond to security events and incidents in cloud environments
• Develop and maintain cloud security policies, standards, and procedures
• Stay current with emerging cloud security threats and mitigation strategies
• Develop and maintain Infrastructure as Code (IaC) - Terraform templates with embedded security controls​
• Implement, manage, and monitor endpoint security solutions in cloud environments, including tools such as Cortex XDR and SentinelOne
• Configure, manage, and troubleshoot cloud-based firewall technologies
• Apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments
• Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines
• Provide technical leadership and mentorship to junior engineers, fostering a culture of continuous learning and improvement

Requirements:

• Bachelor's degree in computer science, Information Technology, or a related field (or equivalent experience)
• 7+ years of experience in Cloud Infrastructure, Platform Engineering, or similar roles
• 5+ years of experience with security engineering, computer and network security and security protocols
• Deep understanding of cloud-native architectures, microservices, and distributed systems
• Strong proficiency in Google Cloud Platform
• Experience securing CI/CD pipelines, deployment automation, and internal tooling
• Strong communication skills, with the ability to explain complex technical concepts to non-technical stakeholders
• Relevant GCP certifications (e.g., Google Professional Cloud Security Engineer) are highly desirable