Senior Software Engineer - Cloud & Platform Security

Atoms•San Francisco, CA

2d•$167,000 - $230,000•Onsite

About The Position

Atoms is hiring a Senior Software Engineer focused on Cloud & Platform Security to work directly with its Infrastructure team to secure the systems that manage and control its fleet. The role adds deep security expertise in identity, secrets, network segmentation, and fleet-management and remote-vehicle-control APIs, while partnering with the team that owns cloud and Kubernetes infrastructure. The engineer will design and enforce least-privilege access across cloud environments, strengthen secrets and credential management, threat model and review APIs, improve network segmentation, and collaborate with Infrastructure engineers during architecture and design reviews. The role also includes reviewing Kubernetes security controls alongside the team responsible for the platform. The position is based onsite at Atoms’ San Francisco office, five days a week. The base salary range is $167,000–$230,000 per year. Equity awards and an annual performance-based bonus may also be available.

Requirements

At least 3 years of experience in cloud, infrastructure, or platform security.
Hands-on experience working with production Kubernetes environments.
Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
Experience designing or reviewing coarse-grained and fine-grained authorization models.
Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
Experience managing or securing non-human identities and service-to-service access.
Strong understanding of network segmentation and access boundaries in cloud environments.
Demonstrated ability to collaborate closely with infrastructure and software engineering teams and influence security decisions.

Nice To Haves

Experience securing real-time or low-latency control-plane systems.
Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.

Responsibilities

Design and enforce least-privilege access across cloud environments, focusing on service identities and other non-human access.
Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, in partnership with the Infrastructure team that owns the platform.

Benefits

Medical, dental, and vision insurance, with multiple plans including HSA options.
Company-paid life and short- and long-term disability insurance.
Voluntary accident, critical illness, and hospital indemnity insurance.
Optional supplemental life insurance for employees, spouses, and children.
Pet insurance discount.
401(k).
Health Savings Account (HSA).
Flexible Spending Accounts for healthcare, dependent care, and commuter expenses.
Discretionary vacation days.
Eight paid holidays per year.
Paid sick time.
Paid bereavement leave.
Paid parental leave.
Equity awards and an annual performance-based bonus may be available.