Staff Cloud Security Engineer, Temporal

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
• 8+ years in cloud infrastructure and security experience
• Coding experience in languages such as Go, Java, or similar
• Hands-on experience with one or more cloud providers (e.g., AWS, GCP, Azure), with an understanding of how to optimize for security, cost, performance, and reliability
• Deep familiarity with Kubernetes and container security best practices
• Experience securing infrastructure-as-code (Terraform, Helm, Kubernetes YAML) and CI/CD pipelines
• Knowledge of encryption, authentication, and secure communication protocols
• Familiarity with tools for infrastructure/cloud security (CSPM, SAST/DAST/SCA, container scanners, IaC linters)
• Ability to clearly explain complex security concepts to technical and non-technical stakeholders
• Proficiency in at least one modern language (Python or Go preferred)
• Comfortable working in a fast-paced, self-directed environment

Desirable

• We are seeking a Staff Cloud Security Engineer to join our Security team, where you'll play a pivotal role in securing the Temporal infrastructure and product
• In this position, you’ll work closely with our platform, infrastructure and software engineering teams to ensure that our infrastructure and services are resilient, secure, and scalable
• You’ll contribute directly to protecting both our internal systems and our customers, while helping shape the security foundation of one of the most innovative developer platforms in the industry
• We’re looking for individuals who are passionate about building secure infrastructure, scaling modern cloud-native systems, and fostering a strong security culture across engineering
• Partner with platform and engineering teams to integrate security into the design, deployment, and operation of infrastructure and cloud services
• Conduct threat modeling and risk assessments of infrastructure components (Kubernetes, Terraform, networking, IAM)
• Drive improvements in infrastructure-as-code security, including Terraform, Kubernetes manifests, and CI/CD pipelines
• Contribute to system architecture and execution with a focus on unblocking security needs in distributed systems and related development pipelines
• Implement and manage container and Kubernetes security controls, auditing, and runtime protection
• Act as a security advocate, helping build a culture of secure design and operation across the company
• Deeply understand how to leverage Temporal’s platform to power infrastructure at scale
• Participate in the on-call rotation