Engineering Manager II, Cloud Security

Builds and leads Qualia's Cloud Security team as a player-coach engineering manager, hiring the two senior engineers who will do the work alongside them. The team owns the security of the infrastructure behind Qualia's home-closing platform, which carries wire instructions, identity documents and nonpublic financial data: AWS accounts, Kubernetes clusters, identity and access into production, CI/CD, and detection and response. It sits alongside Application Security, SRE, Platform and InfoSec.

The central aim is to make the secure configuration the default. The manager sets standards for AWS account structure, network segmentation, encryption and workload isolation, drives least privilege across human and machine identities through SSO, just-in-time access and secrets management, and ships guardrails as code, including service control policies, admission control and hardened Terraform modules. Posture checks are built in-house in Go and policy-as-code. The role also partners with SRE on cloud-native detection, leads the cloud side of incident response, protects the delivery pipeline, and represents Cloud Security in SOC 2 and customer reviews. AI is expected to take the first pass on work such as posture findings and alert triage.

The company wants seven or more years in security, infrastructure or platform engineering on production cloud systems, at least two managing or leading engineers, with deep hands-on AWS and Kubernetes security and Terraform fluency. Having built or scaled a cloud security function matters. A background in regulated fields, detection engineering or DFIR is optional. The role is based in Austin, with remote considered for qualified candidates.