Senior Cloud Security Engineer

Aurora Innovation•San Francisco, CA

18h

About The Position

Aurora is seeking a Senior Cloud Security Engineer to join their Cloud Security engineering team. This role focuses on building resilient, automated security systems at scale, covering infrastructure security, workload security, and CI/CD hardening. The team utilizes a hybrid approach, combining open-source tools (OPA, Trivy, Spire) and commercial products with custom code for automation and digital integrity. The engineer will help balance existing solutions with custom development.

Requirements

5+ years of progressive experience in security engineering.
Understanding of fundamental security concepts like Authentication, Authorization, and Zero-Trust, and their application to cloud-native infrastructure and applications.
Hands-on experience in securing cloud and Kubernetes environments.
Experience with Kubernetes admission controllers, vulnerability management, supply-chain security, network security, and the use of mTLS and PKI to secure infrastructure.
Ability to design and implement security controls for Kubernetes, including strong knowledge of authorization models, admission controllers, and security best practices.
Understanding of modern Identity and Access Management (IAM) standards and technologies such as OAuth2/OIDC, SAML.
Proficiency in at least one modern programming/scripting language (e.g., Python or Go) for building security automation.
Experience writing and using Terraform.

Nice To Haves

Deep fundamental understanding of enterprise-level network security, operating system (Linux), Kubernetes, CI/CD, and application security principles.
Familiarity with compliance frameworks (e.g., SOX, SOC 2, ISO 27001).
Familiarity with machine identity frameworks like SPIFFE/SPIRE, mTLS or equivalent.

Responsibilities

Secure Aurora’s cloud environment in areas including IAM roles and policies, security controls enforcement, and constructing security boundaries for resources and services.
Provide security guidance for Cloud and Kubernetes environments.
Create automation to address security challenges at their root.
Design, build, and configure security infrastructure for cloud platforms such as AWS, Azure, or GCP.
Manage the security posture of workloads deployed on Kubernetes environments.