Staff Cloud Security Engineer
About The Position
Typeface is hiring a Staff Cloud Security Engineer to lead security for its cloud platform. The role designs, builds, and operates controls that protect infrastructure end to end, helping enterprise customers safeguard their brands, content, and data. The engineer will shape cloud security through secure-by-default systems, guardrails, and automation that enable teams to ship safely and quickly. The position leads security architecture across cloud environments, builds and enforces controls, owns identity and access management, and embeds security in container, Kubernetes, and CI/CD workflows. It also monitors cloud security posture, works across Engineering, Product, IT, and Compliance on reviews and certifications, partners with incident response, and mentors teammates. This is a hybrid role based in Palo Alto, California, with three in-office days each week.
Requirements
- 10+ years of experience in cloud security, security engineering, or infrastructure engineering, with a strong track record securing production environments at scale.
- Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
- Deep hands-on experience with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.
- Experience with infrastructure as code such as Terraform, CloudFormation, or Bicep, and container security with Docker and Kubernetes.
- Strong understanding of IAM, network security, encryption, key management, and secrets management.
- Scripting or programming skills in Python, Go, or Bash to automate security controls.
- Excellent communication skills and ability to thrive independently and in collaborative teams.
- Experience supporting B2B or enterprise SaaS products.
Nice To Haves
- Background securing AI or generative AI systems.
- Industry certifications such as AWS Certified Security – Specialty, CCSP, or CISSP.
Responsibilities
- Lead the design and implementation of security architecture across cloud environments, including identity, networking, data protection, and workload security.
- Build and enforce secure-by-default guardrails using infrastructure as code, policy as code, and automated configuration checks.
- Own identity and access management and apply least-privilege principles across accounts, services, and users.
- Secure containers, Kubernetes, and CI/CD pipelines, embedding security into build and deployment processes.
- Monitor cloud security posture, identify misconfigurations and vulnerabilities, and drive them to resolution.
- Collaborate with Engineering, Product, IT, and Compliance partners on security reviews, audits, and certifications such as SOC 2 and ISO 27001.
- Partner with incident response to investigate and remediate cloud security events.
- Mentor and support teammates and help shape a security-first engineering culture.
Benefits
- Competitive compensation, including salary, equity, and 401(k).
- Full medical, dental, and vision insurance for the employee and family.
- HSA and FSA options.
- Flexible time off, including parental leave.
- Well-being programs and resources supporting mental and physical health.
- Daily lunch and snacks.
- Mentorship and the opportunity to work closely with AI leaders on products that ship.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
