3 hours ago
Base Salary
$167k - $230k/yr
Responsibilities
- Design and enforce least-privilege access across cloud environments, especially for service identities and other non-human access.
- Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
- Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
- Design and improve network segmentation separating fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
- Partner with Infrastructure engineers on architecture and design reviews to identify security requirements before production.
- Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards.
Requirements
- At least 3 years of experience in cloud, infrastructure, or platform security.
- Hands-on experience working with production Kubernetes environments.
- Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
- Experience designing or reviewing coarse-grained and fine-grained authorization models.
- Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
- Experience managing or securing non-human identities and service-to-service access.
- Strong understanding of network segmentation and access boundaries in cloud environments.
- Ability to collaborate with infrastructure and software engineering teams and influence security decisions.
- Preferred: experience securing real-time or low-latency control-plane systems.
- Preferred: familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.
Benefits
- Medical, dental, and vision insurance, including HSA options.
- Company-paid short- and long-term life and disability insurance.
- Voluntary accident, critical illness, hospital indemnity, supplemental life, and pet insurance benefits.
- 401(k), Health Savings Account, and flexible spending accounts for healthcare, dependent care, and commuting.
- Discretionary vacation, 8 paid holidays, paid sick time, paid bereavement leave, and paid parental leave.
- Based in the San Francisco office with onsite work five days per week.
- Full-time exempt role; applications are accepted on an ongoing basis.
Tech Stack
IstioKubernetes
Categories
About Atoms
Atoms develops robotics, software, and infrastructure to automate real-world industrial operations, with offerings focused on food production, mining, and robotic transport platforms. It sells integrated automation systems and platforms—Atoms Food, Atoms Mining, and a transport wheelbase for robots—to industrial customers seeking greater productivity and scalability. The privately held company is headquartered in Los Angeles.