Engineering Manager II, Cloud Security

Qualia•Austin, TX

2d•Remote

About The Position

Qualia is hiring a player-coach Engineering Manager to build and lead its Cloud Security team. The manager will set the direction for securing AWS, Kubernetes, and production access paths, hire two senior engineers, and remain hands-on in technical work such as reviewing Terraform plans and IAM policies. The team is responsible for the security of the cloud infrastructure supporting Qualia’s real estate closing platform and its sensitive financial and identity data. It works alongside Application Security, SRE, Platform, and InfoSec. The role focuses on making secure configurations the default through guardrails, organization-level policy, reusable paved-road modules, and detection that identifies drift and abuse quickly. The manager will also establish where AI-assisted workflows are appropriate for posture findings, access reviews, and alert triage. The role is based in Austin, Texas, with a hybrid option for nearby candidates. Qualia is open to remote possibilities for qualified candidates.

Requirements

At least 7 years in security, infrastructure, or platform engineering on production cloud systems.
At least 2 years managing or leading engineers.
Deep hands-on AWS security experience, including IAM and Organizations, VPC design, sops, logging, and services that carry sensitive data.
Production Kubernetes security experience, including RBAC, network policy, admission control, workload identity, and container image hygiene.
Fluency with infrastructure as code, such as Terraform, and a record of shipping guardrails that engineers adopted.
Experience building or scaling a cloud security function, or a major part of one, and demonstrating what changed as a result.
Strong written communication skills, including the ability to write architecture standards, incident post-mortems, and concise risk summaries for leadership.
Ability to measure impact by exposure removed and time to detect, and to point to supporting numbers.

Nice To Haves

Experience in fintech, real estate technology, or another regulated, high-liability domain.
Detection engineering or digital forensics and incident response (DFIR) experience in cloud environments.
Hands-on use of LLMs or agents in security workflows such as posture triage, access review, or alert enrichment.

Responsibilities

Hire, coach, and set goals for Cloud Security engineers; own delivery against the roadmap.
Set cloud security architecture standards for AWS account structure, network segmentation, encryption, and workload isolation across Kubernetes clusters.
Drive least privilege for human and machine identities, including SSO into AWS, role design, just-in-time access, and secrets management.
Ship security guardrails as code, including service control policies, admission control, policy-as-code checks in CI, and hardened Terraform modules.
Build in-house posture checks in Go and policy-as-code across cloud resources and container images; prioritize findings and drive their resolution.
Partner with SRE on cloud-native detection using CloudTrail, audit logs, and runtime signals, and lead the cloud side of incident response.
Protect CI/CD, artifact provenance, and deployment credentials as production assets.
Review proposals and represent Cloud Security in SOC 2 and customer security reviews.