Senior Cloud Infrastructure Security Engineer at Flexport
Netherlands
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Flexport
Responsibilities:
- Design and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns.
- Build guardrails and platform patterns that prevent misconfiguration (drive fixes at the Terraform/module level rather than ticket-by-ticket).
- Harden Kubernetes workloads: pod security, network policy, service mesh, secrets handling, and image supply-chain controls (provenance/signing).
- Implement policy-as-code and IaC scanning that block risky patterns in CI pipelines.
- Write production-quality code (Go/Python) and ship security automation through standard CI/CD.
- Partner with platform and regional engineering teams to ensure services inherit secure defaults and to act as the cloud security technical lead locally.
Requirements:
- ~5–8 years building cloud, infrastructure, or platform security solutions with hands-on AWS and Kubernetes experience.
- Strong experience with IaC (Terraform), module-driven remediation, and GitOps-style workflows.
- Proficiency in at least one compiled language (Go or similar) and one scripting language (Python).
- Deep understanding of IAM, least-privilege design, multi-account architectures, network segmentation, and workload identity.
- Familiarity with service mesh, policy-as-code tools, CI/CD integration, and supply-chain security concepts (image signing, provenance).
- Experience operating in heterogeneous, global environments and influencing engineering teams to adopt secure-by-default patterns.