Senior Cloud Security Engineer

Are you passionate about building secure, scalable systems in the cloud? Do you enjoy collaborating across teams to embed security at every stage of development? Are you excited to contribute your cloud security expertise to an environment that values innovation, collaboration, and continuous improvement? If so, we invite you to be a part of our innovative team. As a Senior Cloud Security Engineer at Ridgeline, you’ll take the lead in securing key components of our platform and cloud infrastructure. You will work closely with Engineering, DevOps, Product, and Compliance to embed cloud security practices, enable secure-by-design development, and implement scalable, resilient security guardrails. Your contributions will help ensure our AWS environments and services are safe, compliant, and efficient. You'll also explore and apply emerging AI tools like GitHub Copilot and ChatGPT to enhance our workflows and capabilities in innovative ways. At Ridgeline, how we work matters as much as what we build. Ridgeliners act like owners, choose growth over comfort, and communicate with transparency. We assume positive intent, bias toward action, and bring solutions—not just problems. We celebrate wins, learn from setbacks, and thrive in a resilient, collaborative, high-performing culture. If this excites you, we’d love to meet you. You must be work authorized in the United States without the need for employer sponsorship. The impact you will have: Perform security and architecture reviews of AWS infrastructure and third-party cloud services Develop scalable security tooling and automation, incorporating AI-augmented platforms where applicable Design and maintain security guardrails such as SCPs, IAM boundaries, and policy-as-code Integrate detection and alerting into observability systems to enhance runtime security monitoring Embed security into CI/CD pipelines, infrastructure automation, and internal tooling Establish frameworks for secure integration with third-party services and internal platforms Improve identity and access management, encryption, and least-privilege controls Collaborate with engineering, product, and compliance teams to align on security requirements Provide support and technical guidance through code reviews, pairing, and consultation Encourage a collaborative, solutions-focused approach to securing services at scale What we look for: 5+ years of experience in cloud security or platform engineering Bachelor’s degree in Computer Science or equivalent practical experience Proficiency in a high-level language such as Python (preferred), Kotlin, or TypeScript Hands-on experience with AWS services including IAM, VPC, ECS/EKS, Lambda, S3, and CloudWatch Expertise in designing and applying IAM and SCP policies Knowledge of cloud workload protection, monitoring, and threat detection in AWS Experience using Terraform and infrastructure-as-code practices Clear and effective communication skills, especially around security tradeoffs and technical design Demonstrated ability to lead projects, work independently, and contribute cross-functionally Bonus: Familiarity with network security principles such as traffic segmentation, firewalls, IDS/IPS Contributions to open source security tooling or research Experience applying AI or LLM tools in security or engineering workflows About Ridgeline Ridgeline is the first front-to-back system of record for investment managers. Founded by visionary entrepreneur Dave Duffield (co-founder of both PeopleSoft and Workday), the company was created to modernize an industry held back by outdated, disconnected technology. Powered by a single, real-time data set and embedded AI, Ridgeline helps firms automate complexity, accelerate collaboration, and deliver tailored client experiences at scale, without added headcount or risk. Ridgeline is headquartered in Lake Tahoe, with offices in New York, Reno, and the Bay Area, and is recognized by Fast Company as a “Best Workpl ... (truncated, view full listing at source)