4 months ago
Toronto, CanadaSenior
Responsibilities
- Own the security architecture of Opendoor’s production cloud environment across AWS accounts, Kubernetes clusters, Terraform-managed infrastructure, and the identity plane.
- Build and operate cloud security visibility and protection capabilities integrated with engineering workflows and automated remediation.
- Define and drive zero-trust access strategies using device trust and identity-aware proxies.
- Harden Kubernetes through RBAC, admission policies, workload identity, runtime protection, image signing, and base-image strategy.
- Build agentic detection and response workflows and operate cloud detection engineering using AWS security services, Datadog, and incident response playbooks.
- Drive shift-left cloud security through Terraform/Terrakube, GitHub Actions, and Elastic Container Registry.
- Partner with Infrastructure on VPC architecture, ingress, secrets management, service identity, and multi-cloud identity integrations.
- Mentor engineers and turn cloud security patterns into automated guardrails.
Requirements
- At least 5 years of cloud or infrastructure security experience with deep AWS expertise.
- Strong programming skills in at least one of Go, Python, or TypeScript, plus the ability to read and write Terraform and shell scripts.
- Hands-on Kubernetes security experience covering RBAC, network policies, admission control, workload identity, image security, and supply-chain security.
- Experience deploying and operating cloud posture and workload protection tooling such as Wiz, Prisma, Orca, Datadog, CrowdStrike Falcon Cloud, or Lacework.
- Demonstrated ability to build identity and access management solutions at scale.
- Experience building agentic systems that replace reactive security work and a strong automation-oriented mindset.
- Preferred experience with zero-trust network access, detection engineering, threat modeling, AI or machine-learning pipeline security, compliance frameworks, and open-source cloud security tooling.
- Ability to work autonomously in ambiguous environments and collaborate effectively with product and infrastructure engineers.
Benefits
- The role is based in Opendoor’s downtown Toronto office and requires in-person work four days per week: Monday, Tuesday, Thursday, and Friday.
- Candidates must live within commuting distance of the office.
Tech Stack
Categories
About Opendoor
Opendoor builds a digital platform for buying and selling homes, offering instant cash offers to sellers and self-serve tools for buyers to tour and purchase. The company makes money by purchasing homes, reselling them, and providing related real estate services. Founded in 2014 and headquartered in San Francisco, Opendoor is a public company traded on NASDAQ (OPEN) and operates across many U.S. housing markets.