Staff Infrastructure Security Engineer
Ridgeline · Reno, NV; San Ramon, CA
About this role
**Staff Infrastructure Security Engineer** **Location:** San Ramon, CA | Reno, NV Ridgeline is seeking an experienced **Staff Infrastructure Security Engineer** to drive **secure-by-default cloud architecture** across product areas and set the technical direction for securing Ridgeline’s cloud environments. You’ll be a recognized expert in **AWS security** and most cloud security specialties, driving the security roadmap for those areas. You’ll also ensure cloud development, deployment, and methodologies comply with industry standards and regulations. ## What You’ll Do - Drive secure-by-default cloud architecture across product areas; threat model new infrastructure designs and service adoptions, and define security requirements to eliminate risk classes before systems are built. - Identify complex cloud security risks that tooling misses (e.g., identity chaining, cross-account lateral movement, control plane/data plane separation failures, supply chain risks) and perform variant analysis to eradicate risk classes across the cloud environment. - Design **AI-augmented analysis workflows** that combine manual expertise with automated detection to find risks at scale. - Lead high-impact cloud incidents as technical lead or incident commander. - Drive findings to remediation (assess exploitability, calibrate risk honestly, and build systemic fixes that reduce risk over time); use AI to find patterns across historical findings. - Own or lead development of advanced cloud security platforms at organizational scale, including AWS guardrails and controls (e.g., **SCPs, IAM boundaries, AWS managed security services, custom solutions, and policy-as-code**). - Architect AI-powered detection and posture management pipelines that reduce manual effort while maintaining accuracy; relentlessly reduce false positives so engineering teams trust the tools. - Embed security into **CI/CD** and infrastructure automation to ensure reproducible, testable, and auditable deployments. - Lead strategy for access management, least-privilege enforcement, encryption/key management, and runtime protections across the platform. - Build and champion frameworks for secure platform integrations with third-party cloud services and internal tools. - Shape cloud security decisions across multiple engineering organizations; partner with Staff+ engineers and platform teams on design (not just audit sign-off) and influence through technical credibility. - Define and execute complex cross-functional projects from planning to production; deliver within deadlines, manage changing plans, and prioritize work spanning multiple cycles. - Set team standards for effective and responsible use of AI in cloud security workflows, including responsible experimentation and data use; build lightweight agents and automations to accelerate outcomes. - Think creatively, own problems, seek solutions, and communicate clearly. ## Who You Are / What Makes You Qualified - **8+ years** of relevant experience in cloud security or platform engineering, including independently defining and executing complex projects and leading initiatives across multiple teams. - Expert proficiency in at least one language (**Python strongly preferred**; Go, Kotlin, or TypeScript a plus). - AWS expertise, especially: - **Identity & Access Management:** IAM, Orgs & SCPs, Identity Center - **Networking:** VPC, Security Groups, Transit Gateway, Load Balancers - **Compute:** EKS - **Data Persistence:** S3, Auro
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.