Cloud Security Specialist – Platforms Engineering
Xona Space Systems3 months ago
Burlingame, CA, USAMid Level
Base Salary
$153k - $178k/yr
Responsibilities
- Design and enforce secure cloud architectures, zero-trust network segmentation, and hardening standards across AWS accounts and Kubernetes platforms.
- Architect authentication, authorization, secrets management, IAM, and zero-trust networking for platform services.
- Build automated security guardrails, policy enforcement, compliance automation, and self-service security tooling.
- Conduct security assessments, penetration testing, threat modeling, and container vulnerability scanning, and coordinate remediation.
- Partner with SRE and operations teams to monitor security telemetry, triage cloud threats, and support incident response and root-cause analysis.
Requirements
- 4+ years of experience in cloud security, DevOps, or platform engineering with emphasis on security operations and architecture.
- Deep hands-on experience securing AWS, GCP, or Azure environments.
- Strong understanding of container security, image hardening, and Kubernetes security controls including RBAC, network policies, and runtime security.
- Proficiency in Python, Go, or Bash and experience with automation tools.
- Familiarity with CI/CD security integrations, SAST, SBOM, SIEM, and CSPM tools.
- Certifications such as AWS Certified Security, CISSP, or CCSK are a plus.
- Preferred experience includes implementing Zero Trust architectures, using Policy-as-Code frameworks such as Open Policy Agent, and building security as a product for developer enablement.
- U.S. roles require U.S. citizenship, lawful permanent residency, or another protected-individual status under applicable export regulations; U.K. and Canada roles have stated security-clearance and controlled-goods requirements.
Tech Stack
Categories
About Xona Space Systems
Xona Space Systems builds a low Earth orbit positioning, navigation, and timing (PNT) satellite constellation, branded Pulsar, to deliver centimeter-level accuracy and secure timing to devices and infrastructure worldwide. The company provides PNT signals and integrations for sectors such as autonomous systems, defense, and industrial IoT. Privately held and headquartered in Burlingame, California, it targets GPS compatibility and notes U.S. export-control eligibility requirements for many roles.