Principal Cloud Security Engineer

☁️ Principal Cloud Security Engineer | Remote | USA & Canada Pax8 is hiring a Principal Cloud Security Engineer across the USA and Canada to shape and secure the future of our cloud marketplace, protecting the infrastructure powering millions of platform interactions through modern cloud, platform, and AI-enabled security practices. 🚀 Build the Security Foundations of the FutureThis is a rare opportunity to become the technical authority for cloud security within Pax8's Platform Security function. You'll influence how security is designed, implemented, and governed across a rapidly evolving cloud ecosystem while partnering directly with engineering leaders responsible for some of the most critical technology in our business.As technology, automation, and AI continue transforming the cloud marketplace, you'll help define the standards that allow innovation to happen safely at scale. You'll have the autonomy to set direction, solve complex security challenges, and create patterns that engineering teams can adopt globally. 🌍 Join a Company Changing the Cloud MarketplaceAt Pax8, we're building the technology marketplace of the future through cloud innovation, AI-powered insights, and a thriving global partner ecosystem. Today we support more than 39,000 partners, work with 130+ vendors, and help hundreds of thousands of businesses embrace modern technology. Learn more about our journey through our US About page and US Newsroom, where you'll see how we're continuing to innovate, grow and invest in the future of technology. 🔐 What You'll Be Doing☁️ Establish Secure-by-Design Cloud StandardsCreate and evolve security baselines for cloud infrastructure, container platforms, platform tooling, and third-party services, ensuring security controls remain effective as our technology landscape grows.🛡️ Strengthen Identity & Access ControlsDefine modern least-privilege approaches across cloud identities, service accounts, platform access models, and containerized workloads, reducing risk while enabling engineering productivity.⚙️ Secure the Software Delivery LifecycleLead security governance across build and deployment platforms, helping engineering teams implement resilient controls that protect code, pipelines, secrets, and software supply chains.🌐 Validate Security Architecture at ScaleEvaluate network segmentation strategies, cloud connectivity patterns, workload isolation approaches, and platform architecture decisions to reduce attack surface and limit blast radius.📊 Drive Visibility Through Security MetricsCreate meaningful security posture reporting that translates technical findings into business context, enabling informed risk decisions and continuous improvement.📝 Define Security Patterns for Engineering TeamsDevelop reference architectures, engineering standards, and decision records that make secure implementation easier and more consistent across the organisation.🤝 Become a Trusted Technical PartnerWork closely with DevOps, Site Reliability Engineering, and Platform Engineering teams, embedding security expertise into architecture reviews, operational planning, and strategic initiatives. 🎯 The Impact You'll HaveYour work will directly influence the resilience, scalability, and security posture of the technology platform that powers Pax8's marketplace. You'll help engineering teams move faster with confidence, reduce operational risk, strengthen compliance readiness, and ensure security remains an accelerator rather than a blocker to innovation.This role combines deep technical expertise with organisation-wide influence, allowing you to shape platform security practices that affect teams, partners, and customers globally. ✅ What Success Looks LikeYou'll thrive in this role if you bring: Extensive experience securing modern cloud and infrastructure platforms. Deep practical expertise across Amazon Web Services services including identity, networking, encryption, logging, secrets management, containers, and data services. Demonstrated success creating security standards, architectural guidance, and governance frameworks that engineering teams genuinely adopt. Proven ability to influence technical decisions without relying on reporting-line authority. Advanced knowledge of Kubernetes security, workload isolation, access controls, network controls, and container governance. Strong understanding of software delivery security, platform automation, and modern deployment pipelines. Hands-on experience reviewing infrastructure as code and ensuring security controls are embedded into engineering workflows. Experience assessing SaaS and platform technologies through threat modelling and security architecture reviews. Familiarity with cloud security posture management and platform governance tooling beyond simple alert review. Knowledge of security considerations for emerging AI and agent-based workloads. Experience operating within multi-tenant environments where scale, availability, and data isolation are critica