Senior Cloud Infrastructure Security Engineer

All security disciplines work under the umbrella of the combined PSI (Platform, Security & Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. This is not a compliance or certification role. You won't be measured on audit portfolios. You'll be measured on the guardrails you build and whether engineering teams reach for them by default.

A misconfigured IAM boundary here doesn't just degrade a dashboard: it can stall a customs filing or strand a container. Flexport also runs a genuinely heterogeneous estate: hundreds of services, carrier and customs integrations, and infrastructure spanning three continents, which makes multi-account architecture and cross-border data handling real problems rather than exam questions.

What You'll Do

Architecture & guardrails

• Design and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns for new services.
• Fix the Terraform module, not the finding — drive remediation-at-source so misconfigurations get closed at the pattern level, not one ticket at a time.

Kubernetes & workload security

• Harden our Kubernetes platform: pod security, service mesh and network policy, secrets management, and supply-chain controls (image provenance and signing).
• Partner with platform engineers so new services inherit secure defaults instead of requesting them after the fact.

Policy & automation

• Build and maintain policy-as-code and IaC scanning that block risky patterns in CI.
• Write real code — Go or Python, shipped through the same CI/CD the rest of engineering uses.

Partnership

• Act as the local technical voice on cloud and infrastructure security for our Amsterdam engineering teams, and partner closely with the US-based cloud security team.

You Should Have

• Typically 5–8 years of experience in cloud, infrastructure, or platform security engineering, including hands-on AWS and Kubernetes work — we care more about what you've built than the exact number. If you meet most of this, apply.
• Proficiency in at least one compiled language (Go or similar) and one scripting language (Python or similar).
• Experience with infrastructure-as-code (Terraform or similar) and a GitOps delivery model — changes shipped through code review, not tickets and manual steps.
• Working knowledge of IAM and least-privilege design across cloud and container environments.

Nice to Have

• Experience with cloud security posture tooling (Wiz, Orca, Prisma, or similar) as a signal source rather than an end in itself.
• Software supply-chain security experience (SLSA, artifact signing, provenance).
• Familiarity with EU data-residency and cross-border data-handling considerations.
• Multi-cloud experience.

How We Work

• In Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together.
• We stay closely aligned with our coworkers on other continents.
• We have the latest hardware and software, including frontier AI models on day one.
• We're agile, but not dogmatic. Teams decide how they work best.

Why This Role Is Special

• You'll inherit a real, established estate with legacy to pave over — not a blank slate. If you want the harder, more honest version of greenfield work, this is it.
• This is a builder's cloud security role in a market where the comparable senior openings skew toward certification and audit work. You won't be asked to own a PCI portfolio here.
• You're part of PSI: security is treated as infrastructure with real engineering quality bars, not a policy function.
• We sponsor visas for the right candidate.

What's in it for you

• An opportunity to contribute to one of the fastest-growing companies, where you'll have the chance to create a global impact while being part of a thriving multinational environment.
• Daily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on a daily basis.
• Commute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam.
• 25 working days as vacation days based on full-time employment.
• Health insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.
• A defined pension contribution scheme.
• Equity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.
• Employee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members.
• Parental leave benefit: Flexport is here to support you and your family during one of the most important times in life — the birth of a child. Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.