Staff Cloud Security Engineer

Responsibilities

• Maintain and iterate on the Swiss AWS environment to enforce data locality and ensure core infrastructure security
• Design and build secure networking and private resource access patterns for human and programmatic use
• Author and maintain Terraform code to deploy security infrastructure and contribute to a secure module registry
• Write and support CI checks using policy-as-code (OPA) and IaC scanning to enforce best practices at scale
• Automate vulnerability detection and remediation using event-driven architecture and serverless workflows
• Strengthen identity and secrets management through federation, role design, ABAC, and KMS strategy
• Partner with infrastructure and engineering teams to deliver secure business outcomes and conduct design reviews

Requirements

• Extensive experience building and securing AWS in production, multi-account environments
• Advanced Terraform expertise, including module creation and remote execution
• Proficiency in Python and the boto3 library
• Deep networking knowledge
• Experience with policy-as-code (OPA, Rego)
• Strong understanding of GitOps (GitHub Actions, Argo CD), Linux, containers, and K8s
• Clear written and verbal communication skills with the ability to mentor others

About the Company

Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. More than 1,400 firms in nearly 60 countries use Addepar to manage and advise on nearly $9 trillion in assets.