Xometry logo
Xometry

Where Big Ideas Are Built

Staff Cloud Security Engineer

Cloud EngineerCloud EngineerFull TimeRemoteLeadTeam 1,001-5,000Since 2013H1B SponsorCompany SiteLinkedIn

Location

Maryland

Posted

13 days ago

Salary

$180K - $200K / year

Seniority

Lead

Job Description

Staff Cloud Security Engineer

Xometry

• Own CrowdStrike Falcon configuration, ensuring policies are appropriately scoped, tuned, and generating actionable alerts. • Partner with MDR to define alert routing, triage thresholds, and escalation logic, ensuring the right signals reach the right team. • Monitor cloud environments (primarily AWS) for security posture drift: misconfigured IAM roles, overly permissive security groups, exposed storage, and non-compliant resource configurations. • Secure Kubernetes clusters and containerized workloads: manage Network Policies, RBAC, Admission Controllers, and runtime detection for anomalous container behavior. • Develop and enforce cloud security policies and standards for AWS infrastructure, ensuring secure and scalable deployments align with organizational risk posture. • Evaluate and lead the implementation of additional detection tooling, including cloud SIEM platforms, designing detection rules and alerting pipelines. • Manage infrastructure as code (IaC) security using Terraform or OpenTofu — ensuring IaC definitions meet security standards before deployment. • Automate security posture checks and detection workflows using Python and shell scripting. • Stay current with the evolving cloud threat landscape and translate emerging threats into detection coverage or posture improvements.

Job Requirements

  • Minimum 8 years of experience in cloud security, security engineering, or a related infrastructure security discipline.
  • Hands-on experience with a cloud security posture management (CSPM) platform — CrowdStrike, Wiz, Prisma Cloud, Orca, or equivalent. Prior CrowdStrike experience is a plus but not required.
  • Deep familiarity with AWS security architecture: IAM/SCP policy design, VPC networking, security groups, CloudTrail, and cloud-native security controls. GCP or Azure experience considered in lieu of AWS for strong candidates willing to expand into AWS.
  • Proficiency with infrastructure as code (IaC) tools such as Terraform, OpenTofu, or CloudFormation, with an understanding of how to enforce security standards within IaC workflows.
  • Strong Python and shell scripting skills for security automation, detection rule development, and tooling integration.
  • Must be a US Citizen or legal permanent resident (Xometry handles ITAR-controlled data).

Benefits

  • 401(k) match
  • medical, dental and vision insurance
  • life and disability insurance
  • generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave
  • EAP, other wellbeing resources

Related Categories

Related Job Pages

More Cloud Engineer Jobs

Xometry logo

Staff Cloud Security Engineer

Xometry

Where Big Ideas Are Built

Cloud Engineer13 days ago
Full TimeRemoteTeam 1,001-5,000Since 2013H1B Sponsor

• Own CrowdStrike Falcon configuration, ensuring policies are appropriately scoped, tuned, and generating actionable alerts. • Partner with MDR to define alert routing, triage thresholds, and escalation logic. • Monitor cloud environments (primarily AWS) for security posture drift. • Secure Kubernetes clusters and containerized workloads. • Develop and enforce cloud security policies and standards for AWS infrastructure. • Evaluate and lead the implementation of additional detection tooling. • Manage infrastructure as code (IaC) security using Terraform or OpenTofu. • Automate security posture checks and detection workflows using Python and shell scripting. • Stay current with the evolving cloud threat landscape.

Kentucky
$180K - $200K / year
Archesys Inc logo

Cloud Solutions Architect

Archesys Inc

Archesys is a technology firm specializing in innovative cloud solutions and services for clients across various industries. We pride ourselves on cutting-edge technologies, exceptional customer service, and a collaborative work environment.

Cloud Engineer13 days ago
Full TimeRemoteTeam 11-50

Role Description We are seeking an experienced Cloud Solutions Architect (AWS & AI) to lead the design and delivery of secure, scalable, and intelligent cloud solutions. This role combines AWS cloud architecture, Generative AI, modern application development, and customer engagement to help organizations adopt innovative technologies while meeting security, compliance, and operational requirements. This is a strategic, customer-facing role that partners with executive stakeholders, engineers, and delivery teams to design next-generation cloud and AI solutions from concept through production. Location: This is a remote position. Residency Requirement: Candidates MUST have lived in the U.S. for at least 3 of the past 5 years and be authorized to work in the U.S. (Citizen, Permanent Resident, or EAD). Sponsorship: This position does not offer any type of sponsorship. Candidates must already be authorized to work in the U.S. (e.g., Citizen, Permanent Resident, or EAD). Clearance: Public Trust Clearance (or ability to obtain) Key Responsibilities - Cloud Solution Architecture - Lead the architecture and design of cloud-native solutions on Amazon Web Services (AWS). - Develop reference architectures, solution blueprints, technical roadmaps, and migration strategies. - Design highly available, secure, resilient, and cost-optimized cloud environments. - Guide cloud modernization initiatives including application modernization, containerization, and serverless architectures. - Ensure architectures align with AWS Well-Architected Framework principles. - AI & Intelligent Solutions - Design enterprise AI solutions leveraging OpenAI, Amazon Bedrock, and other Large Language Model (LLM) platforms. - Architect Retrieval-Augmented Generation (RAG) solutions using enterprise knowledge repositories and vector databases. - Design Agentic AI solutions that automate workflows, decision-making, and business processes. - Define AI governance, responsible AI practices, security controls, and model lifecycle strategies. - Identify opportunities where AI can improve operational efficiency, customer experience, and mission outcomes. - Leverage AI-assisted engineering tools responsibly while ensuring all architectural decisions, security reviews, and technical deliverables remain under human oversight and accountability. - Technical Leadership - Provide technical leadership across multiple cloud and AI initiatives. - Mentor engineers and development teams on cloud architecture, AI adoption, and AWS best practices. - Review solution designs, code, infrastructure, and deployment strategies. - Establish reusable architecture patterns, standards, and reference implementations. - Drive technical innovation and evaluate emerging cloud and AI technologies. - Customer Engagement - Partner with customers to understand business objectives and translate them into scalable technical solutions. - Lead architecture workshops, technical discovery sessions, and solution reviews. - Present architecture recommendations to executive leadership and technical stakeholders. - Support proposal development, technical responses, demonstrations, and proof-of-concepts. - Collaborate with program managers, product owners, and delivery teams to ensure successful implementation. - Cloud Engineering & DevSecOps - Design Infrastructure as Code (IaC) solutions using Terraform. - Architect container platforms using Docker and Kubernetes. - Design secure CI/CD pipelines and DevSecOps practices. - Define observability, monitoring, logging, resiliency, disaster recovery, and operational excellence strategies. - Incorporate FinOps principles to optimize cloud cost, utilization, and governance. - Documentation & Governance - Develop architecture diagrams, technical documentation, implementation guides, and operational playbooks. - Ensure solutions align with enterprise architecture standards and security frameworks. - Support architecture governance, design reviews, and technical decision records. Qualifications - Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline (or equivalent professional experience). - 5+ years of experience designing enterprise software and cloud solutions. - 3+ years of hands-on AWS architecture experience. - 2+ years designing or implementing Generative AI solutions. Technical Skills - Deep expertise with Amazon Web Services (AWS). - Experience architecting AI solutions using OpenAI APIs and Amazon Bedrock. - Experience designing Retrieval-Augmented Generation (RAG) architectures. - Experience designing Agentic AI solutions and intelligent workflow automation. - Strong understanding of cloud-native architectures, microservices, APIs, and distributed systems. - Experience with Terraform and Infrastructure as Code. - Experience with Docker and Kubernetes. - Strong understanding of networking, identity management, security, and cloud governance. - Experience with CI/CD pipelines and DevSecOps practices. - Excellent architecture documentation and presentation skills. Preferred Qualifications - AWS Certified Solutions Architect – Professional (preferred). - AWS Certified AI Practitioner or AWS Certified Machine Learning – Specialty. - Experience with LangChain, LangGraph, CrewAI, AutoGen, Semantic Kernel, or similar AI orchestration frameworks. - Experience with vector databases such as Pinecone, Amazon OpenSearch, pgvector, or Weaviate. - Experience with Amazon ECS, EKS, Lambda, API Gateway, DynamoDB, Aurora, and S3. - Familiarity with FinOps, observability platforms, and Site Reliability Engineering (SRE). - Experience supporting U.S. Federal Government customers. - Familiarity with FedRAMP, FISMA, NIST 800-53, Zero Trust Architecture, and CMS security requirements. What We're Looking For - Strategic thinker with strong business and technical acumen. - Passion for cloud modernization and AI innovation. - Excellent leadership, mentoring, and communication skills. - Ability to communicate complex technical concepts to executive and non-technical audiences. - Strong customer engagement and consulting experience. - Ability to lead multiple initiatives in a fast-paced Agile environment. - Customer-first mindset with a commitment to delivering secure, scalable, and innovative solutions. Eligibility to Work at ArcheSys - All work must be performed within the continental United States. - Candidates must be legally authorized to work in the U.S. without sponsorship. - Must be a U.S Citizen or Green Card Holder. - Selected candidates may be required to complete background investigations and obtain government security authorization for certain projects. - ArcheSys participates in E-Verify. What We Offer - Competitive salary and comprehensive benefits package. - Fully remote work environment. - Opportunity to architect enterprise-scale cloud and AI solutions. - Exposure to OpenAI, Amazon Bedrock, Agentic AI, and emerging AWS technologies. - Continuous learning through AWS certifications, AI training, conferences, and professional development. - Collaborative culture that encourages innovation, experimentation, and technical excellence. - Opportunity to lead transformational Federal and Commercial cloud modernization initiatives.

United States
Full TimeRemoteTeam 10,001+Since 1903H1B Sponsor

• Lead architecture design and engineering for GCP relational database platforms (Cloud SQL for PostgreSQL, Cloud SQL for SQL Server, AlloyDB, Spanner). • Define and implement enterprise database standards aligned with security, scalability, and performance best practices. • Drive modernization initiatives including database migrations to GCP using tools such as DMS, Striim and migration frameworks. • Design highly available, resilient, and cost-optimized database solutions on GCP. • Implement infrastructure-as-code (IaC) using tools such as Terraform. • Enable secure connectivity patterns (IAM, VPC, Private Service Access, Private Service Connect, serverless integrations). • Lead Cloud Databases financial accounting, performance tuning, capacity planning, and database reliability engineering. • Integrate AI/ML capabilities into database platforms (e.g., MCP, data agents, context engineering, anomaly detection, query optimization). • Consult with application teams to enable data pipelines for AI/ML workloads. • Evaluate and adopt AI-assisted database operations and automation solutions. • Drive initiatives on AI-enabled observability and self-healing systems. • Establish best practices for backup, recovery, disaster recovery, and compliance. • Define monitoring, logging, and alerting strategies for database services. • Lead database governance and continuous cost optimization initiatives.

Michigan
$115K - $192.9K / year
Full TimeRemoteTeam 201-500Since 2014H1B No Sponsor

• Diseñar, desarrollar y mantener servicios backend escalables y listos para producción utilizando Node.js. • Diseñar e implementar arquitecturas cloud-native sobre AWS considerando seguridad, resiliencia y escalabilidad. • Construir y mantener APIs REST seguras, escalables y de alto rendimiento. • Implementar integraciones entre aplicaciones, plataformas internas y servicios externos. • Diseñar soluciones distribuidas para aplicaciones de alta disponibilidad. • Implementar despliegues automatizados mediante pipelines CI/CD. • Diseñar y mantener infraestructura utilizando Infrastructure as Code (Terraform o AWS CDK). • Configurar y administrar ambientes de desarrollo, QA, staging y producción. • Implementar observabilidad mediante CloudWatch, métricas, logs y monitoreo. • Diseñar estrategias de protección utilizando AWS WAF, AWS Shield y controles de seguridad cloud. • Participar en decisiones técnicas relacionadas con escalabilidad, costos, rendimiento y mantenibilidad. • Diseñar estrategias de Disaster Recovery y continuidad operativa. • Colaborar con equipos multidisciplinarios para transformar requerimientos de negocio en soluciones técnicas. • Participar en iniciativas de modernización de aplicaciones legacy hacia arquitecturas cloud-native. • Participar en ejercicios de System Design proponiendo soluciones end-to-end para aplicaciones empresariales.

Mexico