4 months ago
Responsibilities
- Own the security architecture of Opendoor’s production cloud environment across AWS accounts, Kubernetes clusters, Terraform-managed infrastructure, and the identity plane.
- Build and operate cloud security visibility, protection, and automated infrastructure-risk remediation capabilities integrated with engineering workflows.
- Define and drive zero-trust access strategies using device trust and identity-aware proxies.
- Harden Kubernetes through RBAC, admission policies, workload identity, runtime protection, image signing, and base-image strategies.
- Build agentic detection and response workflows that connect alerting, investigation, and remediation.
- Embed cloud security checks into pipelines using Terraform, Terrakube, GitHub Actions, and Elastic Container Registry.
- Partner with Infrastructure on VPC architecture, ingress, secrets management, service identity, and cloud identity integrations.
- Operate cloud detection engineering using GuardDuty, Security Hub, CloudTrail, VPC Flow Logs, Datadog, and incident response playbooks.
- Establish secure-by-default patterns for AI-enabled applications, MCP servers, and agent-driven workflows touching production infrastructure.
- Mentor engineers on cloud security patterns and convert recurring patterns into automated guardrails.
Requirements
- 5+ years of cloud or infrastructure security experience with deep AWS expertise.
- Strong programming skills in at least one of Go, Python, or TypeScript, plus the ability to read and write Terraform and shell scripts.
- Hands-on Kubernetes security experience with RBAC, network policies, admission control, workload identity, image security, and supply-chain security.
- Experience deploying and operating cloud posture and workload protection tooling such as Wiz, Prisma, Orca, Datadog, CrowdStrike Falcon Cloud, or Lacework.
- Demonstrated ability to build identity and access management solutions at scale.
- Experience building agentic systems or automating reactive security work.
- Ability to work autonomously in ambiguous environments and define effective security practices.
- Bonus experience with zero-trust network access tools such as Cloudflare Access, Tailscale, Twingate, or Google BeyondCorp.
- Bonus experience in detection engineering, threat modeling, adversarial security, AI or machine-learning pipeline security, agent frameworks, MCP integrations, cloud compliance, or open-source cloud security tooling.
Benefits
- The role is based in the Miami office and requires in-person work four days per week on Monday, Tuesday, Thursday, and Friday.
- Candidates must live within commuting distance of the Miami office.
Tech Stack
Argo CDAWSAzureCloudflareDatadogGitHub ActionsGoGoogle Cloud PlatformHelmKubernetesmacOSPythonRubyTerraformTypeScriptVault
Categories
About Opendoor
Opendoor builds a digital platform for buying and selling homes, offering instant cash offers to sellers and self-serve tools for buyers to tour and purchase. The company makes money by purchasing homes, reselling them, and providing related real estate services. Founded in 2014 and headquartered in San Francisco, Opendoor is a public company traded on NASDAQ (OPEN) and operates across many U.S. housing markets.