security engineer in cloud infrastructure

Addepar is a global data and AI platform that helps investment professionals turn complex financial information into actionable intelligence. It unifies portfolio, market, and client data into a total portfolio view and delivers AI-powered insights within investment and client workflows.

• Maintain and iterate on Addepar’s Swiss AWS environment to enforce data locality restrictions, secure core infrastructure, and integrate security best practices, policies, and solutions;
• Partner with Addepar’s Swiss Infrastructure Operations team to ensure high security standards across the estate;
• Contribute to the design and hardening of a multi-account AWS environment using Organizations, Control Tower, SCPs, and custom tools and guardrails;
• Design and build secure networking and private resource access patterns for human and programmatic use;
• Author and maintain Terraform code for security infrastructure and contribute to a secure Terraform module registry;
• Write and support CI checks using policy-as-code and IaC scanning;
• Automate vulnerability detection and remediation using native AWS technologies, event-driven architecture, and serverless workflows;
• Strengthen identity and secrets management through federation and role design, ABAC, IAM policy reviews, KMS strategy, Secrets Manager, and Parameter Store;
• Use discovery tools and cloud-native logging for investigations, resource discovery, and troubleshooting;
• Participate in infrastructure design reviews and cloud security assessments, producing clear and actionable assessment reports;
• Partner with engineering teams to deliver secure business outcomes and measure impact through coverage, prevention, and response metrics;
• Act as an escalation point for Addepar’s Security Operations Center.

• Several years of hands-on experience building and securing AWS environments in production, including multi-account environments;
• Bachelor’s degree in CS/Engineering or equivalent practical experience;
• Clear written and verbal communication skills;
• Ability to influence across teams and mentor others;
• Expertise in AWS security best practices and deep knowledge of native AWS services;
• Advanced Terraform experience, including module creation, remote execution environments, and integrating security checks into CI;
• Extensive experience with Python and the boto3 library;
• Deep networking knowledge;
• Strong Linux, container, Kubernetes, secrets management, and CI/CD fundamentals;
• Experience with policy-as-code, including OPA and Rego;
• Experience with GitOps, including GitHub Actions and Argo CD;
• Experience with Zero Trust solutions.

• Applicants must have legal authorization to work in Poland on the first day of employment;
• Visa sponsorship is not available for this position;
• Equal opportunity employer with reasonable accommodation available for individuals with disabilities.