Cloud Security Engineer

Stripe's Cloud Security team builds the security controls and services that let the rest of engineering ship on a well governed cloud platform. This is an engineering post rather than an advisory one: you would be writing and running the infrastructure that enforces the controls, based in Seattle.

What you would work on - Designing and operating core security infrastructure that other engineering teams rely on daily - Working on identity and access controls, cloud identity infrastructure and automation around permissions - Building CI tooling that bakes security checks into the delivery path - Extending Stripe's cloud footprint with guardrails already in place as new services come online - Tuning controls so that the secure path is also the convenient one for engineers - Partnering with infrastructure teams on cloud integrations, and assessing new security tools and practices before adopting them - Holding the line on engineering standards across shared codebases and processes

What they are looking for - Software engineering experience in production environments where mistakes carry real consequences - Cloud security background on at least one of AWS, Azure or GCP - High standards for code quality and a habit of thinking in systems and failure modes - Strong written and verbal communication, given how much of the work is cross team - A relevant education background, with the level unspecified in the posting - Threat modelling in cloud native environments is listed as a preference - Preference also for Linux systems, Kubernetes and container platform knowledge, experience with CSPM or CNAPP monitoring tools, and time spent in multi cloud estates

Stack: AWS, Azure, GCP, Kubernetes, Linux, IAM, SCPs, CSPM, CNAPP