Principal Cloud Security Engineer

☁ Principal Cloud Security Engineer | Remote | USA & Canada

🚀 Build the Security Foundations of the Future

This is a rare opportunity to become the technical authority for cloud security within Pax8's Platform Security function. You'll influence how security is designed, implemented, and governed across a rapidly evolving cloud ecosystem while partnering directly with engineering leaders responsible for some of the most critical technology in our business.

As technology, automation, and AI continue transforming the cloud marketplace, you'll help define the standards that allow innovation to happen safely at scale. You'll have the autonomy to set direction, solve complex security challenges, and create patterns that engineering teams can adopt globally.

🔐 What You'll Be Doing
☁ Establish Secure-by-Design Cloud Standards

Create and evolve security baselines for cloud infrastructure, container platforms, platform tooling, and third-party services, ensuring security controls remain effective as our technology landscape grows.
🛡 Strengthen Identity & Access Controls

Define modern least-privilege approaches across cloud identities, service accounts, platform access models, and containerized workloads, reducing risk while enabling engineering productivity.
⚙ Secure the Software Delivery Lifecycle

Lead security governance across build and deployment platforms, helping engineering teams implement resilient controls that protect code, pipelines, secrets, and software supply chains.
🌐 Validate Security Architecture at Scale

Evaluate network segmentation strategies, cloud connectivity patterns, workload isolation approaches, and platform architecture decisions to reduce attack surface and limit blast radius.
📊 Drive Visibility Through Security Metrics

Create meaningful security posture reporting that translates technical findings into business context, enabling informed risk decisions and continuous improvement.
📝 Define Security Patterns for Engineering Teams

Develop reference architectures, engineering standards, and decision records that make secure implementation easier and more consistent across the organisation.
🤝 Become a Trusted Technical Partner

Work closely with DevOps, Site Reliability Engineering, and Platform Engineering teams, embedding security expertise into architecture reviews, operational planning, and strategic initiatives.

🎯 The Impact You'll Have

Your work will directly influence the resilience, scalability, and security posture of the technology platform that powers Pax8's marketplace. You'll help engineering teams move faster with confidence, reduce operational risk, strengthen compliance readiness, and ensure security remains an accelerator rather than a blocker to innovation.

This role combines deep technical expertise with organisation-wide influence, allowing you to shape platform security practices that affect teams, partners, and customers globally.

• What Success Looks Like

You'll thrive in this role if you bring:

• Extensive experience securing modern cloud and infrastructure platforms.
• Deep practical expertise across Amazon Web Services services including identity, networking, encryption, logging, secrets management, containers, and data services.
• Demonstrated success creating security standards, architectural guidance, and governance frameworks that engineering teams genuinely adopt.
• Proven ability to influence technical decisions without relying on reporting-line authority.
• Advanced knowledge of Kubernetes security, workload isolation, access controls, network controls, and container governance.
• Strong understanding of software delivery security, platform automation, and modern deployment pipelines.
• Hands-on experience reviewing infrastructure as code and ensuring security controls are embedded into engineering workflows.
• Experience assessing SaaS and platform technologies through threat modelling and security architecture reviews.
• Familiarity with cloud security posture management and platform governance tooling beyond simple alert review.
• Knowledge of security considerations for emerging AI and agent-based workloads.
• Experience operating within multi-tenant environments where scale, availability, and data isolation are critical.
• The ability to balance pragmatism and risk management while remaining a trusted advisor to engineering teams.

🔎 Trust and Hiring

At Pax8, we care deeply about building genuine, trust based relationships - starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you're applying as your authentic self, you have nothing to worry about - we're excited to meet you.

We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. More information is available in our Recruitment Privacy Notice. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process.

🌟 Everyone's Welcome Here

We encourage you to apply even if you don't meet 100% of the criteria. We're committed to diverse perspectives, inclusive hiring and sharing your transferrable skills. To fulfil this role, you must hold valid right to work in USA or Canada.

💰 Compensation & Benefits

Salary: $170,000- $193,000/yr

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:

• 401(k) with Company Match
• Medical, Dental & Vision Coverage
• Employee Assistance Program (EAP)
• Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
• Flexible Open PTO
• Paid Sick Leave
• Paid Parental Leave
• RTD EcoPass (eligible Colorado-based employees)

📈 Grow Your Career With Us

There's extensive room for a talented individual to grow at pace - whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive - and full visibility of what it takes to reach your next level.

Please take a moment to review our Proprietary Rights and Non-Competition Agreement - this document outlines important information about your rights and responsibilities if you join our team.

Job Applicant Privacy Notice