Job description

Opportunity Snapshot We’re hiring a Senior Cloud Security Engineer to strengthen and lead cloud security across Pixieset’s AWS, Cloudflare, and Kubernetes environments. In this hands-on role, you’ll establish secure infrastructure patterns, embed practical guardrails into how we build and deploy, and help teams identify and address cloud risks effectively. You’ll work closely with Security, DevOps, and Engineering to improve our cloud security posture while enabling teams to move quickly and confidently. If you enjoy solving complex infrastructure security challenges, building scalable solutions, and influencing how security works across an organization, we’d love for you to join our team. Your Impact • Design and improve security guardrails across our AWS organization, accounts, networks, and identity and access management • Define and implement security standards for Kubernetes, containers, secrets, credentials, and encryption • Own and improve edge security controls across Cloudflare, including DNS, WAF, abuse prevention, and Zero Trust access • Define and improve the security of cloud workloads, including AI services, agents, and their access to infrastructure, data, credentials, and internal tools • Embed security into infrastructure-as-code workflows and CI/CD pipelines • Own and improve our cloud security posture management platform, including triage, risk prioritization, and remediation workflows • Strengthen cloud logging, monitoring, threat detection, and incident response readiness • Identify and mitigate security risks introduced by AI agents, including permissions, tooling access, credential exposure, and data leakage • Develop automation and reusable security controls that make secure infrastructure easier to build and operate • Partner with DevOps and Engineering teams to evaluate cloud architecture, resolve risks, and implement secure defaults • Help define the cloud security roadmap and communicate priorities and progress to technical stakeholders and leadership Role Requirements • 5+ years of experience in software engineering, cloud engineering, infrastructure, DevOps, or a related technical role within a SaaS environment • 3+ years of experience in cloud security, infrastructure security, or a related engineering role • Strong hands-on experience securing production workloads in AWS, including IAM, networking, logging, and native security services • Experience securing Kubernetes and containerized environments • Experience securing edge infrastructure using Cloudflare or a similar platform, including DNS, WAF, and Zero Trust access • Proficiency with CloudFormation, CDK, Terraform or similar, and integrating security controls into infrastructure-as-code and CI/CD workflows • Experience operating a CNAPP or CSPM platform such as Wiz, Prisma Cloud, or a comparable tool • Experience with cloud threat detection, vulnerability management, incident investigation, and remediation • Understanding of emerging security risks in agentic and AI-enabled systems • Scripting or programming experience with Python, Go, Bash, or a similar language • Strong communicator and collaborator with a growth mindset — quick to learn new technologies, adapt to diverse platforms and codebases, and work effectively across teams • Self-motivated with sharp attention to detail and a passion for mentoring, fostering a culture of continuous learning while empowering engineers, developers, and testers to deliver high-quality, secure solutions What We Offer • Hybrid work environment (2 in-office days per week) • 4 weeks of annual vacation & paid time off for office holiday closures • RRSP matching • $2,000 annual health & lifestyle spending account • $1,000 annual education budget • $1,000 annual charitable donation matching • Comprehensive benefits: extended health, critical illness, long-term disability & life insurance • Company-issued MacBook & home office budget • Anniversary rewards & complimentary Pixieset premium account • Team-building activities & company-wide events • A workplace recognized for excellence — proudly certified as a Great Place to Work™, ranked among Canada’s Best Workplaces,™ and named one of Canada’s Top Small & Medium Employers The typical salary range for this position is CAD $117,800 - $160,650 annually. Salary offered will be based on skills, experience and market data. Working at Pixieset Pixieset is the #1 go-to platform for photographers to deliver photos, sell prints, book clients, get paid, and more, all in one place. We help millions of photographers and creatives around the world do more of what they love. At Pixieset, you’ll find a culture built on collaboration, curiosity, and craftsmanship. We care deeply about clean design, thoughtful code, and meaningful work that creates real impact for our users. We value continuous learning, connection, and the power of technology to simplify complex challenges. Our team is diverse in background and perspective but united by a shared mission: building products that empower creatives to grow with purpose. Pixieset is growing quickly but thoughtfully, combining the stability to think long-term with the agility to move fast. Whether you’re building new features, improving infrastructure, or shaping the customer experience, your work has both impact and purpose. Every feature we create helps creatives spend less time managing and more time creating. For more information on Pixieset, please visit our careers page and follow us on Facebook , LinkedIn , X and Instagram ! Internal Title: Senior Engineer, Cloud Security

Requirements

Must-haves

Opportunity Snapshot
We’re hiring a Senior Cloud Security Engineer to strengthen and lead cloud security across Pixieset’s AWS, Cloudflare, and Kubernetes environments.
If you enjoy solving complex infrastructure security challenges, building scalable solutions, and influencing how security works across an organization, we’d love for you to join our team.
Design and improve security guardrails across our AWS organization, accounts, networks, and identity and access management
Define and implement security standards for Kubernetes, containers, secrets, credentials, and encryption
Own and improve edge security controls across Cloudflare, including DNS, WAF, abuse prevention, and Zero Trust access
Define and improve the security of cloud workloads, including AI services, agents, and their access to infrastructure, data, credentials, and internal tools
Embed security into infrastructure-as-code workflows and CI/CD pipelines
Own and improve our cloud security posture management platform, including triage, risk prioritization, and remediation workflows
Strengthen cloud logging, monitoring, threat detection, and incident response readiness
Identify and mitigate security risks introduced by AI agents, including permissions, tooling access, credential exposure, and data leakage
Develop automation and reusable security controls that make secure infrastructure easier to build and operate
Partner with DevOps and Engineering teams to evaluate cloud architecture, resolve risks, and implement secure defaults
Help define the cloud security roadmap and communicate priorities and progress to technical stakeholders and leadership
Role Requirements
5+ years of experience in software engineering, cloud engineering, infrastructure, DevOps, or a related technical role within a SaaS environment
3+ years of experience in cloud security, infrastructure security, or a related engineering role
Strong hands-on experience securing production workloads in AWS, including IAM, networking, logging, and native security services
Experience securing Kubernetes and containerized environments
Experience securing edge infrastructure using Cloudflare or a similar platform, including DNS, WAF, and Zero Trust access
Proficiency with CloudFormation, CDK, Terraform or similar, and integrating security controls into infrastructure-as-code and CI/CD workflows
Experience operating a CNAPP or CSPM platform such as Wiz, Prisma Cloud, or a comparable tool
Experience with cloud threat detection, vulnerability management, incident investigation, and remediation
Understanding of emerging security risks in agentic and AI-enabled systems

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awskubernetesaici/cdpythongo

Platform: breezy
Effort: medium

Benefits

Benefits detected in the listing.

Paid Time Off