Senior Software Engineer - Cloud & Platform Security
CloudKitchens3 hours ago
Base Salary
$167k - $230k/yr
Responsibilities
- Design and enforce least-privilege access across cloud environments, focusing on service identities and other non-human access.
- Strengthen secrets and credential management using HashiCorp Vault, cloud KMS, or equivalent systems.
- Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
- Design and improve network segmentation isolating fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
- Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before production deployment.
- Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards.
- Secure real-time or low-latency control-plane systems and service-mesh workload-to-workload mTLS where applicable.
Requirements
- At least 3 years of experience in cloud, infrastructure, or platform security.
- Hands-on experience working with production Kubernetes environments.
- Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
- Experience designing or reviewing coarse-grained and fine-grained authorization models.
- Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
- Experience managing or securing non-human identities and service-to-service access.
- Strong understanding of network segmentation and access boundaries in cloud environments.
- Ability to collaborate with infrastructure and software engineering teams and influence security decisions.
- Experience securing real-time or low-latency control-plane systems is preferred.
- Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies is preferred.
Benefits
- Medical, dental, and vision insurance with multiple plans and HSA options.
- Company-paid short- and long-term life and disability insurance.
- Voluntary accident, critical illness, and hospital indemnity insurance, plus optional supplemental life insurance.
- Pet insurance discount, 401(k), HSA, and flexible spending accounts.
- Discretionary vacation, 8 paid holidays, paid sick time, paid bereavement leave, and paid parental leave.
- Based in the San Francisco office and onsite five days per week.
Tech Stack
IstioKubernetes
Categories
About CloudKitchens
CloudKitchens builds delivery-first commercial kitchen facilities and restaurant software for food and beverage operators. It leases turnkey kitchen space and provides tools for order management, delivery logistics, and multi-brand operations, enabling restaurants and entrepreneurs to expand with lower upfront costs. The company is privately held and headquartered in Los Angeles, serving markets across the U.S. with a mix of owned sites and enterprise solutions.