What You’ll Do
Own the multi-year cloud security architecture vision and the security invariants that govern engineering decisions across all product lines, AWS accounts, and infrastructure.
Set the technical strategy for cloud security tooling and automation, including how AI changes security operations, and make the build-versus-buy decisions that determine what the team can do for years.
Drive company-wide guardrails and controls in our AWS environment (e.g., SCPs, IAM boundaries, AWS managed security services, custom-built solutions, and policy-as-code), and implement the standards and processes that keep them enforced.
Develop threat models and security approaches, and identify emerging threats to identity, data, AI workloads, and infrastructure before they become problems.
Create frameworks and methodologies for securely integrating third-party cloud services and internal platforms, and see them adopted across Ridgeline.
Anticipate broad changes in cloud and infrastructure security, identify where our current approach stops scaling, and propose fixes before it does.
Build AI and automation frameworks, and partner across functions to deploy reusable agents that multiple teams use.
Deliver large, cross-team projects on schedule and at high quality, breaking complex programs into pieces the contributing teams can execute.
Build the cloud security team's long-term technical culture, develop Staff-level cloud security engineers, and sponsor the next leaders at Ridgeline.
Shape C-suite and board-level decisions on cloud security investment, cloud adoption strategy, and organizational risk acceptance.
Who You Are & What Makes You Qualified
10+ years of relevant experience in cloud security or platform engineering, including experience leading large cross-team initiatives with company-wide impact and delivering them on schedule.
Advanced proficiency in at least one high-level language (Python strongly preferred; Kotlin or TypeScript a plus).
Expert-level experience with AWS, especially in the following areas
Identity and Access Management (IAM, Orgs & SCPs, Identity Center)
Networking (VPC, Security Groups, Transit Gateway, Load Balancers, Network Firewall)
Compute (EKS, ECS, Lambda)
Data Persistence (S3, Aurora, DynamoDB)
Logging & Monitoring (GuardDuty, CloudTrail, CloudWatch)
Demonstrated success defining enterprise-wide access management strategy and policy frameworks (IAM/SCPs), and cloud security architecture that engineering teams adopted.
Deep understanding of cloud workload protection, infrastructure monitoring, and threat detection in AWS-native environments.
Expert-level experience securing Kubernetes and Amazon EKS (including EKS Auto Mode): cluster access control, network policy, Istio service mesh, Kyverno admission policy, and image signing with cosign.
Fluency with infrastructure-as-code (e.g., OpenTofu or Terraform), GitOps delivery (e.g., ArgoCD), and CI/CD practices, and experience setting tooling and automation strategy, including build-versus-buy decisions.
Proven ability to present cloud security risk and trade-offs to executives, and to influence investment, cloud adoption, and risk acceptance decisions.
Track record of anticipating broad change in cloud security and acting on it before it became urgent.
Experience building AI or automation frameworks and reusable agents that change how cross-functional teams work.
Experience developing senior engineers and sponsoring emerging leaders, and building team standards, detection frameworks, and architectural judgment that outlast individual projects.
About Ridgeline
Ridgeline is headquartered in Lake Tahoe, with offices in New York, Reno, the Bay Area, Dublin Ireland. Ridgeline is recognized by Fast Company as a “Best Workplace for Innovators,” by Frost & Sullivan as a “Technology Innovation Leader,” and by The Software Report as a “Top 100 Software Company.”
Ridgeline is proud to be a community-minded, discrimination-free equal opportunity workplace.
Ridgeline processes the information you submit in connection with your application in accordance with the Ridgeline Applicant Privacy Statement. Please review the Ridgeline Applicant Privacy Statement in full to understand our privacy practices and contact us with any questions.
