1 day ago
Dublin, IrelandStaff+
Responsibilities
- Own the multi-year cloud security architecture vision and security invariants across all product lines, AWS accounts, and infrastructure.
- Set the technical strategy for cloud security tooling, automation, AI-enabled security operations, and build-versus-buy decisions.
- Drive AWS guardrails and controls including SCPs, IAM boundaries, managed security services, custom solutions, and policy-as-code.
- Develop threat models and security approaches for identity, data, AI workloads, and infrastructure, and identify emerging threats.
- Create and drive adoption of frameworks for securely integrating third-party cloud services and internal platforms.
- Build AI and automation frameworks and deploy reusable agents used by multiple teams.
- Deliver large, cross-team security projects on schedule and at high quality.
- Develop Staff-level cloud security engineers, establish long-term technical culture, and sponsor emerging leaders.
- Shape executive and board-level decisions regarding cloud security investment, cloud adoption, and organizational risk acceptance.
Requirements
- 10+ years of relevant experience in cloud security or platform engineering, including leadership of large, company-wide initiatives.
- Advanced proficiency in at least one high-level programming language, with Python strongly preferred and Kotlin or TypeScript as additional options.
- Expert-level AWS experience across IAM, AWS Organizations and SCPs, IAM Identity Center, VPC, Security Groups, Transit Gateway, Load Balancers, Network Firewall, EKS, ECS, Lambda, S3, Aurora, DynamoDB, GuardDuty, CloudTrail, and CloudWatch.
- Proven success defining enterprise-wide access management strategies, IAM/SCP policy frameworks, and cloud security architectures adopted by engineering teams.
- Deep understanding of cloud workload protection, infrastructure monitoring, and threat detection in AWS-native environments.
- Expertise securing Kubernetes and Amazon EKS, including cluster access control, network policy, Istio service mesh, Kyverno admission policy, EKS Auto Mode, and image signing with cosign.
- Fluency with infrastructure as code such as OpenTofu or Terraform, GitOps delivery such as ArgoCD, and CI/CD practices.
- Experience setting tooling and automation strategy, making build-versus-buy decisions, and building AI or automation frameworks and reusable agents.
- Ability to present cloud security risks and trade-offs to executives and influence investment, cloud adoption, and risk acceptance decisions.
- Experience developing senior engineers, sponsoring emerging leaders, and building durable team standards, detection frameworks, and architectural judgment.
Benefits
- The role is based in Dublin, Ireland.
- Applicants must be permitted to work in Ireland, including under EU work authorization, without employer sponsorship.
- Ridgeline is a discrimination-free equal opportunity workplace.
Tech Stack
Categories
About Ridgeline
Ridgeline builds a cloud-native, AI-enabled front-to-back investment management platform for asset and wealth managers, unifying portfolio accounting, trading/compliance, reporting, and client experience tools on a single data model. It sells enterprise software as a subscription and runs on AWS. Founded in 2018 by Dave Duffield, the company is headquartered in Incline Village, Nevada, with offices in New York, Reno, and the Bay Area.