Senior Platform Security Engineer (Cloud)

Job description

Job Title: Senior Platform Security Engineer (Cloud) About Skyhigh Security: Skyhigh Security is a dynamic, fast-paced, cloud company that is a leader in the security industry. Our mission is to protect the world’s data, and because of this, we live and breathe security. We value learning at our core, underpinned by openness and transparency. Since 2011, organizations have trusted us to provide them with a complete, market-leading security platform built on a modern cloud stack. Our industry-leading suite of products radically simplifies data security through easy-to-use, cloud-based, Zero Trust solutions that are managed in a single dashboard, powered by hundreds of employees across the world. With offices in Santa Clara, Aylesbury, Paderborn, Bengaluru, Sydney, Tokyo and more, our employees are the heart and soul of our company. Skyhigh Security Is more than a company; here, when you invest your career with us, we commit to investing in you. We embrace a hybrid work model, creating the flexibility and freedom you need from your work environment to reach your potential. From our employee recognition program, to our ‘Blast Talks' learning series, and team celebrations (we love to have fun!), we strive to be an interactive and engaging place where you can be your authentic self. We are on these too! Follow us on LinkedIn and Twitter @SkyhighSecurity . Role Overview: Skyhigh Security is hiring a Senior Platform Security Engineer to join our Engineering Excellence organization, reporting to the Senior Manager of Engineering Environments and Tooling. In this high-impact, hands-on engineering role, you will be the primary custodian of the security, integrity, and automated guardrails of our non-production cloud environments, ensuring our developer spaces are both highly enabling and thoroughly secure. Rather than just reviewing GRC checklists or writing static policy documents, you will own the technical security standards for our platforms and build the automated validation frameworks that keep our engineering organization secure over the long term. Your impact will be measured by your ability to drive continuous, automated compliance, empower a distributed network of local security champions, and build robust, secure-by-default capabilities for our shared cloud resources. You must have deep, hands-on expertise in cloud security architecture, infrastructure-as-code, and container security to lead this initiative. You will build highly collaborative relationships with Engineering Managers, Security Champions, and the Central CISO team to ensure that platform security controls are highly practical, transparent, and seamlessly integrated into the developer experience. Senior Platform Security Engineer (Cloud) – Engineering Excellence Skyhigh Security is hiring a Senior Platform Security Engineer to join our Engineering Excellence organization, reporting to the Senior Manager of Engineering Environments and Tooling. In this high-impact, hands-on engineering role, you will be the primary custodian of the security, integrity, and automated guardrails of our non-production cloud environments, ensuring our developer spaces are both highly enabling and thoroughly secure. Rather than just reviewing GRC checklists or writing static policy documents, you will own the technical security standards for our platforms and build the automated validation frameworks that keep our engineering organization secure over the long term. Your impact will be measured by your ability to drive continuous, automated compliance, empower a distributed network of local security champions, and build robust, secure-by-default capabilities for our shared cloud resources. You must have deep, hands-on expertise in cloud security architecture, infrastructure-as-code, and container security to lead this initiative. You will build highly collaborative relationships with Engineering Managers, Security Champions, and the Central CISO team to ensure that platform security controls are highly practical, transparent, and seamlessly integrated into the developer experience. Responsibilities Engineer Environment Security Standards: Author, maintain, and continuously update the technical platform security policies governing all non-production environments and developer labs. Design Automated Validation Frameworks: Establish, run, and scale the technical auditing and drift-detection functions to ensure all engineering teams maintain compliance with security guardrails over months and years. Lead Security Champions: Mobilize and align local security champions across engineering teams, guiding them as they design, own, and execute their local environment security plans. Architect Shared Security Capabilities: Architect and build advanced, reusable security capabilities for shared resources, common labs, and core cloud environments, ensuring a secure baseline for the entire organization. Continuous Improvement: Monitor emerging security threats and regulatory changes, proactively adapting non-production platforms and policies to address new risks. Bridge Engineering and Security: Act as the primary technical liaison between the core engineering teams and the central security organization for environments, translating corporate mandates into pragmatic engineering practices. Requirements Proven Technical Leadership: Extensive hands-on experience in DevSecOps, cloud security engineering, or systems engineering with a strong focus on securing dynamic non-production infrastructure. Platform Security Design: Demonstrated experience writing technical security standards and designing sustainable, automated configuration-auditing frameworks at scale. Influence Without Authority: Exceptional stakeholder management skills, with a proven track record of guiding distributed engineering teams and motivating local security champions. Advanced Security Architecture: Deep knowledge of threat modeling, network segmentation, secrets management, and access control strategies within test and lab environments. Strategic & Methodical Thinking: Ability to balance developer velocity and flexibility in labs with rigorous, automated security requirements. Tooling Requirements Deep Core Expertise AWS Cloud Security: Advanced knowledge of securing AWS environments, complex IAM policies, strict Security Group configurations, and secure-by-default VPC routing Hybrid Security Boundaries: Experience establishing secure, key-only SSH Jumphosts, SSH tunnels, and managing secure client certificate structures Software Supply Chain Security: Experience leveraging Artifactory to govern open-source dependencies, and Black Duck to enforce vulnerability checking. Container Security & GitOps: Hands-on experience securing containers, image registries, and driving continuous delivery pipelines via ArgoCD, Harness, or Jenkins Policy-as-Code & Compliance: Experience implementing compliance-checking tooling (e.g., Open Policy Agent (OPA), Kyverno, AWS Config, or custom auditing scripts). Broad / Functional Competency On-Premises Infrastructure Tools: Conceptual understanding of virtualization structures, Docker registries, on-premise Kubernetes clusters managed via Helm charts , and automated virtual machine configurations Infrastructure-as-Code & Configuration: General ability to review and work within Terraform, Ansible, or Puppet configurations. Secrets & Identity Management: Working familiarity with secrets vaults, Active Directory, or Okta. If you’re excited to design the policies and build the systems that safeguard modern cloud engineering environments at scale, we’d love to hear from you. Company Benefits and Perks: We believe that the best solutions are developed by teams who embrace each other's unique experiences, skills, and abilities. We work hard to create a dynamic workforce where we encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees. Retirement Plans Medical, Dental and Vision Coverage Paid Time Off Paid Parental Leave Support for Community Involvement We're serious about our commitment to a workplace where everyone can thrive and contribute to our industry-leading products and customer support, which is why we prohibit discrimination and harassment based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status. Our Commitment to You : At Skyhigh Security, we are committed to creating a safe and trustworthy experience for our customers, employees, and candidates. Please be aware that fraudulent recruiting activity can occur through fake job postings or impersonated communications. Skyhigh Security conducts interviews through professional channels only and does not use text messages, instant messaging, or group chats for interviews. We will never request sensitive personal information—such as your date of birth, Social Security number, or national ID number—during the interview process. Skyhigh Security also does not require candidates to pay fees, purchase products or services, or process payments of any kind as part of the recruiting or hiring process. And Skyhigh Security will never keep any original work authorization documents that we may be required to review during the hiring process.