Staff Cloud Security Engineer

Temporal Technologies is seeking a Staff Cloud Security Engineer to secure its cloud environment and platform for customers. The role partners with infrastructure and engineering teams to embed security across multi-cloud architecture, distributed workflow systems, communications layers, and responsible AI practices.

Responsibilities:

• Collaborate with product and engineering teams to integrate security principles into the design and architecture of cloud infrastructure across multiple clouds (AWS, GCP, Azure, and others)
• Secure Temporal's core platform components, including the workflow engine, task queue architecture, and worker execution model - identifying attack surfaces unique to durable, stateful distributed systems
• Conduct threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across our multi-cloud environment, with particular focus on workflow execution, task queue integrity, and client-server trust boundaries
• Secure Temporal's gRPC-based communication layer, including mTLS certificate management, service mesh configuration, and API authentication
• Manage cloud security posture using tools such as Wiz, including misconfiguration detection, compliance monitoring, and remediation across all three cloud providers
• Stay current on emerging cloud security standards and guidance (e.g. CSA Cloud Controls Matrix, CIS Benchmarks) and translate these into actionable internal policy
• Able to participate in on-call rotation

Requirements:

• • Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
• • 5+ years in cloud security or a related role
• • Proven partnership with engineering teams, bringing security expertise to infrastructure access and security posture
• • Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control
• • Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention
• • Strong opinions on the use of AI in different areas (assessments, threat models, penetration testing, etc)
• • A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
• • Experience with secrets management at scale (e.g. HashiCorp Vault, AWS Secrets Manager) and payload encryption patterns such as codec servers for protecting sensitive workflow data
• • Proficiency in Go; familiarity with Python. Go is Temporal's primary server and SDK language
• • Strong command of gRPC security, mTLS, and service mesh architectures (Istio, Envoy)
• • Excellent communication and ability to explain complex security concepts to non-technical stakeholders
• • Excellent collaboration and communication skills
• • Able to participate in on-call rotation
• • Prior experience with Temporal, Cadence, or similar workflow orchestration platforms and an understanding of workflow history, replay semantics, and scheduling internals
• • FedRAMP, SOC 2 Type II, or ISO 27001 experience, particularly in the context of cloud-native SaaS
• • Open Source automation or automation projects
• • Expertise in other areas of security (AppSec, CorpSec, GRC)
• • Security conference talks or published research