Senior Software Engineer - Cloud & Platform Security
CloudKitchens2 hours ago
Base Salary
$167k - $230k/yr
Responsibilities
- Design and enforce least-privilege access across cloud environments, especially for service identities and other non-human access.
- Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
- Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs for authentication, authorization, rate limiting, and replay protection.
- Design and improve network segmentation isolating fleet-management, dispatch, and remote-control systems.
- Partner with Infrastructure engineers in architecture and design reviews to identify security requirements before production.
- Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards.
- Collaborate with infrastructure and software engineering teams to influence security decisions and build secure systems.
Requirements
- At least 5 years of experience in cloud, infrastructure, or platform security.
- Hands-on experience with production Kubernetes environments.
- Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
- Experience designing or reviewing coarse-grained and fine-grained authorization models.
- Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
- Experience managing or securing non-human identities and service-to-service access.
- Strong understanding of network segmentation and access boundaries in cloud environments.
- Ability to collaborate closely with infrastructure and software engineering teams and influence security decisions.
- Nice to have experience securing real-time or low-latency control-plane systems.
- Nice to have familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.
Benefits
- Medical, dental, vision, disability, and life insurance.
- Flexible Spending Account and Health Savings Account options.
- 401(k), equity eligibility, sick time, unlimited flexible time off, paid holidays, and paid parental leave.
- Pre-tax commuter benefit plan.
- Team lunch in the SoMa office every Tuesday and Thursday.
- San Francisco office-based role requiring onsite work five days per week.
Tech Stack
IstioKubernetes
Categories
About CloudKitchens
CloudKitchens builds delivery-first commercial kitchen facilities and restaurant software for food and beverage operators. It leases turnkey kitchen space and provides tools for order management, delivery logistics, and multi-brand operations, enabling restaurants and entrepreneurs to expand with lower upfront costs. The company is privately held and headquartered in Los Angeles, serving markets across the U.S. with a mix of owned sites and enterprise solutions.