Security engineer (l5) - cloud architecture, tooling and security

At Netflix, our mission is to entertain the world. Together, we are writing the next episode - pushing the boundaries of storytelling, global fandom and making the unimaginable a reality. We are a dream team obsessed with the uncomfortable excitement of discovering what happens when you merge creativity, intuition and cutting-edge technology. Come be a part of what’s next.

Netflix operates our streaming service control plane on Amazon Web Services, which has led to one of the largest and most sophisticated AWS environments in the world. Cloud Security for our public cloud deployments is critical to Netflix’s security posture to protect our members, partners, employees, and intellectual property. Of this charter, the Cloud Architecture, Tooling and Security (CATS) team designs and implements strategic high-level cloud security boundaries to balance risk while enabling business needs. We provide cloud security subject matter expertise, build scalable security solutions for account management, cloud identity and access management and provide operational security services to achieve this mission.

We are looking for a cloud security engineer to join this team to serve as a critical partner in securely enabling new Netflix business verticals, supporting innovation and experimentation, and integrating new acquisitions. This role is highly collaborative, focusing on designing and implementing secure cloud access patterns, cloud security boundaries, and new paved paths, primarily involving Identity and Access Management (IAM) challenges in AWS and GCP. While not a dedicated software development role, the ability to build scrappy tooling/scripting and data analysis tools, is required for success in this Security Engineer role.

You will collaborate with software engineering teams to understand business needs and design and implement appropriate, scalable cloud security solutions. You will also design and implement new cloud security strategies and archetypes to discover, self-serve, right-size, and manage cloud resources, and develop internal tooling and scripting for GCP to build capabilities where few currently exist. Furthermore, you will perform threat assessments, apply knowledge of AWS architecture and new AWS services to address security requests, and contribute to operational excellence by reducing risks and eliminating tedious access management minutiae.

Desired Background:

• A broad and deep understanding of cloud security fundamentals, with a particular focus on CloudSec operations, AWS account management and Security Architecture
• GCP expertise is a must, specifically the ability to architect and implement organization-wide security guardrails, and identity governance. You should be comfortable defining secure-by-default blueprints for GCP project lifecycles and service account management, building the foundational tooling and org-level security patterns where few currently exist.
• Experience collaborating with product and engineering teams to design security solutions.
• Strong verbal and written communication skills for conveying complex technical issues cross-functionally.
• A pragmatic approach to security, engaging transparently with the nuances and tradeoffs of security risk.
• Proven ability to identify high-leverage work and drive it independently without explicit direction.
• Experience securing challenging 3rd-party cloud infrastructure access patterns, such as vendor integrations.
• Experience defining insightful and meaningful metrics to gauge and guide cloud security posture or progress.

Our culture is unique, and we live by our values, so it’s worth learning more about Netflix culture.

Generally, our compensation structure consists solely of an annual salary; we do not have bonuses. You choose each year how much of your compensation you want in salary versus stock options. To determine your personal top of market compensation, we rely on market indicators and consider your specific job family, background, skills, and experience to determine your compensation in the market range. The range for this role is $400,000.00 - $680,000.00. This compensation range will vary based on location.

Netflix provides comprehensive benefits including Health Plans, Mental Health support, a 401(k) Retirement Plan with employer match, Stock Option Program, Disability Programs, Health Savings and Flexible Spending Accounts, Family-forming benefits, and Life and Serious Injury Benefits. We also offer paid leave of absence programs. Full-time hourly employees accrue 35 days annually for paid time off to be used for vacation, holidays, and sick paid time off. Full-time salaried employees are immediately entitled to flexible time off. See more details about our Benefits here.

Netflix is a unique culture and environment. Learn more here.

Inclusion is a Netflix value and we strive to host a meaningful interview experience for all candidates. If you want an accommodation/adjustment for a disability or any other reason during the hiring process, please send a request to your recruiting partner.

We are an equal-opportunity employer and celebrate diversity, recognizing that diversity builds stronger teams. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.

Job is open for no less than 7 days and will be removed when the position is filled.