Senior Security Engineer - Infrastructure and Automation

February 19

Apply Now

Receive Emails with Similar Jobs

PagerDuty

WebsiteLinkedInAll Job Openings

In an always-on world, teams trust PagerDuty to help them deliver a perfect digital experience to their customers, every time. PagerDuty is the central nervous system for a company’s digital operations. We identify issues and opportunities in real-time and bring together the right people to respond to problems faster and prevent them in the future. From digital disruptors to Fortune 500 companies, over 18,000 businesses rely on PagerDuty to help them continually improve their digital operations—so their teams can spend less time reacting to incidents and more time building for the future.Dutonians believe that we are a part of a bigger movement of businesses being built to benefit everyone—the customer and the employee, as well as our community. We are go-getters fueled by the fire to reinvent how people and companies work together. We take the lead and get creative to be first in the hearts of our customers. Whether it’s keeping the world on or changing it entirely, Dutonians are fueled by the fire to reinvent how people and companies work together to deliver in real-time, across the globe.Join us to lead uncharted efforts and reinvent how companies run.

1001 - 5000 employees

💰 $90M Series D on 2018-09

📋 Description

• Lead and implement comprehensive IAM strategy across cloud infrastructure • Work closely with Product Engineering teams and conduct architecture reviews and threat modeling sessions focusing on but not limited to identity and access patterns • Design and implement modern service-to-service authentication patterns using technologies such as IRSA (IAM Roles for Service Accounts) and pod identity • Develop and maintain a robust secrets management framework and strategy • Drive adoption of principle of least privilege across all services and applications • Design and implement automated workflows for access reviews and certification • Design and implement security controls for AWS cloud infrastructure and containerized environments • Develop metrics and monitoring for IAM-related security events and access patterns • Monitor and maintain security tooling supporting infrastructure security controls • Design and implement security automations and tool integrations • Develop automated vulnerability management workflows to drive timely remediation • Implement automated incident response playbooks • Mentor and guide team members on security best practices and implementation approaches • Participate in our team's on-call rotation, triaging and addressing security issues as they arise. • Contribute to roadmap and annual planning discussions

🎯 Requirements

• 5+ years of experience as a full-stack Security Engineer in an AWS native, micro-service SaaS environment with focus on IAM. • Deep expertise in cloud security, particularly AWS services including but not limited to: • GuardDuty, CloudTrail, Config • IAM family, Secrets Manager, KMS • EKS, Service Mesh architectures • Strong expertise and experience implementing and managing identity providers, specifically Okta and/or Microsoft Entra at scale (1000+ users). • Strong understanding of zero trust principles and modern authentication patterns • Experience working with multiple development teams and technology stacks • 5+ years experience leading technical security initiatives, with proven ability to scope ambiguous projects, break down complex work into actionable items, and successfully delegate responsibilities while maintaining project momentum • Proficiency with security tools: • Vulnerability Management & EDR: Wiz, Snyk, Qualys/Nessus, Crowdstrike • SIEM: SumoLogic or Splunk • Experience with Infrastructure as Code and CI/CD: • Terraform, Helm, Chef, Ansible, Buildkite, Jenkins, ArgoCD • 4+ years of experience and proficiency in at least one programming language and framework (Python, Java, or similar) • Strong understanding of Threat Modeling principles • Experience with Security Incident Response & Risk Management • High appetite for challenging problems with a high degree of ownership.

🏖️ Benefits

• Competitive salary • Comprehensive benefits package from day one • Flexible work arrangements • Generous paid vacation time • Paid holidays and sick leave • Dutonian Wellness Days - scheduled company-wide paid days off in addition to PTO • Company equity* • ESPP (Employee Stock Purchase Program)* • Retirement or pension plan* • Paid parental leave - up to 22 weeks for pregnant parent, up to 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)* • HibernationDuty - an annual company paid week off when everyone at PagerDuty, with the exception of a small, coverage crew, is asked to take a much needed break to truly disconnect and recharge • Paid volunteer time off - 20 hours per year • Company-wide hack weeks • Mental wellness programs