Principal Cloud Security Engineer Pax

Pax8 is hiring a Principal Cloud Security Engineer across the USA and Canada to shape and secure the future of our cloud marketplace, protecting the infrastructure powering millions of platform interactions through modern cloud, platform, and AI-enabled security practices.

This is a rare opportunity to become the technical authority for cloud security within Pax8's Platform Security function. You'll influence how security is designed, implemented, and governed across a rapidly evolving cloud ecosystem while partnering directly with engineering leaders responsible for some of the most critical technology in our business.

As technology, automation, and AI continue transforming the cloud marketplace, you'll help define the standards that allow innovation to happen safely 'll have the autonomy to set direction, solve complex security challenges, and create patterns that engineering teams can adopt globally.

At Pax8, we're building the technology marketplace of the future through cloud innovation, AI-powered insights, and a thriving global partner ecosystem. Today we support more than 39,000 partners, work with 130+ vendors, and help hundreds of thousands of businesses embrace modern technology.

Learn more about our journey through our US About page and US Newsroom, where you'll see how we're continuing to innovate, grow and invest in the future of technology.

Create and evolve security baselines for cloud infrastructure, container platforms, platform tooling, and third-party services, ensuring security controls remain effective as our technology landscape grows.

Define modern least-privilege approaches across cloud identities, service accounts, platform access models, and containerized workloads, reducing risk while enabling engineering productivity.

Lead security governance across build and deployment platforms, helping engineering teams implement resilient controls that protect code, pipelines, secrets, and software supply chains.

Evaluate network segmentation strategies, cloud connectivity patterns, workload isolation approaches, and platform architecture decisions to reduce attack surface and limit blast radius.

Create meaningful security posture reporting that translates technical findings into business context, enabling informed risk decisions and continuous improvement.

Develop reference architectures, engineering standards, and decision records that make secure implementation easier and more consistent across the organisation.

Work closely with Dev Ops, Site Reliability Engineering, and Platform Engineering teams, embedding security expertise into architecture reviews, operational planning, and strategic initiatives.

Your work will directly influence the resilience, scalability, and security posture of the technology platform that powers Pax8's marketplace. You'll help engineering teams move faster with confidence, reduce operational risk, strengthen compliance readiness, and ensure security remains an accelerator rather than a blocker to innovation.

This role combines deep technical expertise with organisation-wide influence, allowing you to shape platform security practices that affect teams, partners, and customers globally.

You'll thrive in this role if you bring:

• Extensive experience securing modern cloud and infrastructure platforms.
• Deep practical expertise across Amazon Web Services services including identity, networking, encryption, logging, secrets management, containers, and data services.
• Demonstrated success creating security standards, architectural guidance, and governance frameworks that engineering teams genuinely adopt.
• Proven ability to influence technical decisions without relying on reporting-line authority.
• Advanced knowledge of Kubernetes security, workload isolation, access controls, network controls, and container governance.
• Strong understanding of software delivery security, platform automation, and modern deployment pipelines.
• Hands‑on experience reviewing infrastructure as code and ensuring security controls are embedded into engineering workflows.
• Experience assessing SaaS and platform technologies through threat modelling and security architecture…