Senior Security Engineer (Cloud)

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are seeking a Senior Security Engineer to engineer and secure their multi-cloud environment, ensuring resilience and security while facilitating innovation.

Responsibilities:

• Architect and maintain cloud environments built to be secure, resilient, and optimized for performance
• Partner hands-on with internal engineering teams to embed security into the architecture and tooling developers use every day
• Work closely with our IAM counterparts to design and enforce identity and access strategies across all cloud environments
• Harden cloud platforms against emerging threats while keeping them resilient and highly available
• Bring a DevOps mindset by building automation, pipelines, and guardrails using Terraform/IaC and Kubernetes
• Help secure the infrastructure behind AI-driven pipelines and agentic workflows as they become a growing consumer of the software supply chain
• Act as a trusted advisor and collaborator across engineering, translating security requirements into practical, adoptable designs that other teams actually want to use
• Adapt architecture and priorities as the company scales, reworking plans as needs, tooling, or team structure shift
• Assist during relevant incident response investigations

Requirements:

• Strong, hands-on GCP administrative experience
• Solid DevOps background: comfortable using Terraform/IaC, Kubernetes (GKE), and CI/CD pipelines
• Outstanding interpersonal and communication skills: you'll plan, coordinate, and build consensus with the Developer Platform team, IAM stakeholders, and other partners across the org
• Proven experience architecting and securing complex, multi-cloud environments
• A track record of designing systems that are secure, resilient, and built to accelerate engineering velocity
• Experience with AWS and/or Azure is a plus
• Familiarity with software supply chain security concepts particularly SLSA is a strong plus
• Experience securing or architecting AI/ML infrastructure or agentic workflows
• Comfort with ambiguity and rapid change: prior experience at a fast-moving or late-stage startup is a strong plus