7 hours ago
Responsibilities
- Design and implement AWS account structures, IAM roles, permission boundaries, network segmentation, and KMS usage with Terraform and Go.
- Secure Kubernetes through admission policies, RBAC, network policies, workload identity, runtime controls, and patched minimal container images.
- Build reusable infrastructure-as-code modules, CI policy checks, cloud detections, posture checks, and automated remediation.
- Develop Go services and pipelines using CloudTrail, Kubernetes audit logs, runtime signals, and the security telemetry pipeline.
- Implement just-in-time access, short-lived credentials, and secrets management for people, services, and CI.
- Investigate cloud alerts, support infrastructure-side incident response, and address root causes.
- Review infrastructure pull requests and design proposals and collaborate with SRE and product engineers.
Requirements
- 6+ years of experience in cloud security, infrastructure, SRE, or platform engineering, including at least 3 years securing production cloud environments.
- Deep hands-on AWS experience with IAM policy evaluation, Organizations, VPC and private connectivity, KMS, CloudTrail, and GuardDuty or equivalent.
- Production Kubernetes security experience with RBAC, admission control, network policy, pod security, and workload authentication to cloud APIs.
- Strong Terraform or comparable infrastructure-as-code experience, including writing and reviewing modules and building security guardrails.
- Production programming experience; Go is preferred, with Python or TypeScript accepted for candidates prepared to work in Go.
- Ability to analyze attacker movement from leaked credentials or compromised pods to sensitive data and design detections for each stage.
- Strong written communication for security findings and design documentation.
- Experience in fintech, real estate technology, or another regulated, high-liability domain is optional.
- Cloud penetration testing, red team, DFIR, supply chain security, artifact signing, SBOMs, SLSA-style provenance, open-source security tooling, published research, or conference talks are optional.
Benefits
- Remote-first work organization with fully remote support and an Austin hybrid option; the role is based in Austin but remote possibilities may be explored.
- Comprehensive health plans, a 401k program, and commuter benefits.
- Professional development, parental leave, and flexible time off.
- Robust online onboarding, biweekly all-hands meetings, and internal virtual events.
Tech Stack
Categories
About Qualia
Qualia builds cloud software that connects title and escrow companies, mortgage lenders, and real estate agents to manage home closings end to end. Its SaaS platform covers title production, escrow accounting, digital mortgage workflows, e-signatures, remote notary, and borrower/agent collaboration for SMB and enterprise customers. Founded in 2015 and headquartered in San Francisco, the privately held company also has offices in Austin, TX, and Superior, CO.