Senior Cloud Security Engineer

About Us

Headquartered in the United States, TP-Link Systems Inc. is a global provider of reliable networking devices and smart home products, consistently ranked as the world’s top provider of Wi-Fi devices. The company is committed to delivering innovative products that enhance people’s lives through faster, more reliable connectivity. With a commitment to excellence, TP-Link Systems serves customers in over 170 countries and continues to grow its global footprint.

We believe technology changes the world for the better! At TP-Link Systems Inc, we are committed to crafting dependable, high-performance products to connect users worldwide with the wonders of technology.

Embracing professionalism, innovation, excellence, and simplicity, we aim to assist our clients in achieving remarkable global performance and enable consumers to enjoy a seamless, effortless lifestyle.

The Senior Cloud Security Engineer strengthens the security of our cloud environments through hands‑on engineering: identifying and remediating risk, improving visibility, and automating security operations. This role turns security data into actionable insight and measurable risk reduction — finding what’s exposed, prioritizing what matters, and driving fixes to closure. You’ll partner closely with cloud operations, SRE, Dev Ops, and engineering teams across a globally distributed organization, and communicate cloud security posture clearly to both technical and non‑technical stakeholders.

This is a deeply hands‑on technical role for an engineer who builds rather than just operates. You’ll design controls, write automation, develop the dashboards and workflows that make security visible and repeatable, and apply modern AI tooling as a core part of how the work gets done. The right candidate combines strong cloud security fundamentals with the curiosity to keep pace with an evolving threat and technology landscape — and the judgment to know which risks actually matter.

This position is onsite at our Irvine, CA headquarters.

• Design, implement, and harden security controls across AWS, Azure, and hybrid infrastructure.
• Identify vulnerabilities, misconfigurations, identity risks, and exposed services; prioritize by real‑world impact and drive remediation to closure with infrastructure owners.
• Develop dashboards, metrics, and reporting that communicate cloud security posture and remediation progress clearly to technical and executive audiences.
• Apply automation and AI‑assisted workflows to investigations, reporting, and day‑to‑day security operations.
• Conduct secure architecture reviews for cloud services, infrastructure patterns, and deployment pipelines.
• Maintain and improve security standards, runbooks, and guardrails; contribute to incident response and audit readiness.

• 3–5+ years of hands‑on cloud security, infrastructure security, or security engineering experience.
• Cloud security certification: AWS Certified Security – Specialty or Microsoft Certified:
  Azure Security Engineer Associate (AZ‑500).
• Deep working fluency in AWS security — IAM, VPC networking, logging and detection, encryption/KMS, secure configuration at scale.
• Hands‑on experience securing production Azure environments, including Entra  core Azure security services.
• Experience securing Kubernetes workloads and containerized environments.
• Significant experience with an enterprise CSPM/CNAPP platform such as Orca, Wiz, Prisma Cloud, or Microsoft Defender for Cloud.
• AI‑native security engineering: proven, hands‑on use of agentic AI and LLM tooling as a primary engineering method — workflows built, automations shipped, and a working grasp of where these systems fail. Consumer chatbot familiarity does not meet this bar.
• Working knowledge of frameworks such as ISO 27001, ISO/IEC 42001, SOC 2, NIST CSF, CIS Benchmarks, or GDPR.
• Experience leading and executing enterprise security incident response activities.
• Bachelor's degree in a technical field.

• AWS Certified Solutions Architect – Associate and/or Azure architecture certification (AZ‑104 or AZ‑305).
• Experience securing hybrid, private cloud, or on‑premises…