cloud engineer

The Knot Worldwide operates a global platform dedicated to helping people plan life’s most meaningful moments and assisting small business owners in growing their ventures. The organization focuses on fostering authentic connections and providing services that support significant life events through a collaborative, high-performance environment.

• Lead and drive the strategy, design, and implementation of security controls and secure patterns across corporate and production environments;
• Mentor junior security engineers and provide technical guidance on complex security issues;
• Architect and implement advanced, secure, and scalable containerized architectures in multi-cloud environments;
• Collaborate with engineering leads to define product and platform roadmaps, ensuring security requirements are integrated from the design phase;
• Own and continuously improve threat detection, application security, vulnerability management, and assessment procedures;
• Act as a subject-matter expert for critical security domains such as Identity and Access Management, Data Protection, and Cloud Network Security;
• Lead the response and post-mortem analysis for high-severity security incidents;
• Identify and implement strategic opportunities to improve process maturity and automation, including developing internal security tools;
• Provide continuous technical support and escalation management for security-related issues.

• Bachelor's degree in Computer Science or a related field;
• Minimum of 5+ years of progressive security engineering or security architecture experience in large-scale production environments;
• 5+ Years of hands-on experience securing cloud applications and infrastructure, with a strong preference for AWS;
• Proven track record of leading or mentoring major cross-functional projects;
• Deep understanding of security vulnerabilities, attacker exploit techniques, and automated remediation methods;
• Expert-level knowledge of public cloud infrastructure services including IAM, VPC, KMS, CloudWatch, and S3;
• Expert-level understanding of Docker and container orchestration with Kubernetes, including securing production EKS/GKE clusters;
• Experience with advanced application security concepts, microservice architectures, and API security;
• Experience with security tooling such as WAF and Bot Management platforms;
• Excellent written and verbal communication skills for both technical and executive stakeholders;
• Ability to operate with a high degree of autonomy and minimal oversight;
• Nice to have: Experience with scripting and automation (Python, Go), relevant industry certifications (CISSP, CISM, AWS/Azure Security, GSEC), advanced experience in DevOps or IT operations, expertise in CI/CD pipeline security, experience in defining and enforcing security policies across a global organization.

• Flexible vacation;
• Generous parental leave;
• Initiatives supporting growth, development, and employee happiness;
• Holistic offerings for mental wellbeing, physical health, and financial planning.