Principal Cloud Security Engineer

Pax8 is building a cloud marketplace powered by cloud innovation and AI-enabled insights. The Principal Cloud Security Engineer will serve as the technical authority for cloud security, establishing secure-by-design standards, strengthening identity and access controls, securing software delivery, and validating security architecture. The role partners with DevOps, Site Reliability Engineering, and Platform Engineering teams to improve platform resilience, scalability, and security.

Responsibilities:

• Create and evolve security baselines for cloud infrastructure, container platforms, platform tooling, and third-party services, ensuring security controls remain effective as our technology landscape grows
• Define modern least-privilege approaches across cloud identities, service accounts, platform access models, and containerized workloads, reducing risk while enabling engineering productivity
• Lead security governance across build and deployment platforms, helping engineering teams implement resilient controls that protect code, pipelines, secrets, and software supply chains
• Evaluate network segmentation strategies, cloud connectivity patterns, workload isolation approaches, and platform architecture decisions to reduce attack surface and limit blast radius
• Create meaningful security posture reporting that translates technical findings into business context, enabling informed risk decisions and continuous improvement
• Develop reference architectures, engineering standards, and decision records that make secure implementation easier and more consistent across the organisation
• Work closely with DevOps, Site Reliability Engineering, and Platform Engineering teams, embedding security expertise into architecture reviews, operational planning, and strategic initiatives

Requirements:

• • Extensive experience securing modern cloud and infrastructure platforms
• • Deep practical expertise across Amazon Web Services services including identity, networking, encryption, logging, secrets management, containers, and data services
• • Demonstrated success creating security standards, architectural guidance, and governance frameworks that engineering teams genuinely adopt
• • Proven ability to influence technical decisions without relying on reporting-line authority
• • Advanced knowledge of Kubernetes security, workload isolation, access controls, network controls, and container governance
• • Strong understanding of software delivery security, platform automation, and modern deployment pipelines
• • Hands-on experience reviewing infrastructure as code and ensuring security controls are embedded into engineering workflows
• • Experience assessing SaaS and platform technologies through threat modelling and security architecture reviews
• • Familiarity with cloud security posture management and platform governance tooling beyond simple alert review
• • Knowledge of security considerations for emerging AI and agent-based workloads
• • Experience operating within multi-tenant environments where scale, availability, and data isolation are critical
• • The ability to balance pragmatism and risk management while remaining a trusted advisor to engineering teams
• To fulfil this role, you must hold valid right to work in USA or Canada