Engineering Manager II, Cloud Security

At Qualia weve built the leading B2B real estate technology that transforms the home buying and selling experience into a simple secure and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystemhomebuyers and sellers lenders title and escrow agents and real estate agentsonto a single shared digital closing platform providing greater clarity and transparency to real estate transactions. Today through our business customers across the country millions of consumers use Qualia to close on homes every year.

Millions of consumersclose on homes through Qualia every year which means our cloud carries wire instructions identity documents and nonpublic financial data at scale. Cloud Security owns the security of the infrastructure that platform runs on: our AWS accounts and organization Kubernetes clusters identity and access paths into production the CI/CD systems that deploy to it and the detection and response signal that tells us when something is wrong. The team works alongside Application Security SRE Platform and InfoSec.

Were hiring a player-coach Engineering Manager to build and lead Qualias Cloud Security team. Youll set the direction for how we secure AWS Kubernetes and the paths into production hire the two senior engineers wholl do it with you and stay close enough to the work to review a Terraform plan or an IAM policy yourself.

The mandate is to make the secure configuration the default one. That means guardrails organization-level policy paved-road modules that product teams adopt and detection that catches drift and abuse in minutes. Where AI can take the first pass on posture findings access reviews or alert triage youll make that the normal workflow.

• Lead and grow the team. Hire coach and set goals for Cloud Security engineers; own delivery against the roadmap
• Own cloud security architecture. Set standards for AWS account structure network segmentation encryption and workload isolation across our Kubernetes clusters
• Run identity and access for production. Drive least privilege across human and machine identities: SSO into AWS role design just-in-time access and secrets management
• Ship guardrails as code. Service control policies admission control policy-as-code checks in CI and hardened Terraform modules that stop whole classes of misconfiguration
• Own posture management. Build our posture checks in-house in Go and policy-as-code across cloud resources and container images; turn findings into a prioritized owned queue that burns down
• Build detection and response. Partner with SRE on cloud-native detection (CloudTrail audit logs runtime signal) and lead the cloud side of incident response
• Secure the delivery pipeline. Protect CI/CD artifact provenance and deploy credentials as production assets
• Partner across engineering. Review proposals; represent Cloud Security in SOC 2 and customer security reviews

• 7 years in security infrastructure or platform engineering on production cloud systems with 2 years managing or leading engineers
• Deep hands-on AWS security: IAM and Organizations VPC design sops logging and the services that carry sensitive data
• Production Kubernetes security experience: RBAC network policy admission control workload identity and container image hygiene
• Infrastructure-as-code fluency (Terraform or similar) and a record of shipping guardrails engineers adopted
• Youve built or scaled a cloud security function or a major part of one and can show what changed because of it
• Strong written communication: you can write the architecture standard the incident post-mortem and the one-page risk summary for leadership
• You measure impact by exposure removed and time-to-detect and you can point to numbers
• Experience in fintech real estate tech or another regulated high-liability domain (Optional)
• Detection engineering or DFIR background in cloud environments (Optional)
• Hands-on use of LLMs or agents in a security workflow such as posture triage access review or alert enrichment (Optional)

• AWS (primary) some Azure and limited GCP (Vertex AI)
• Kubernetes and a microservice architecture defined in Terraform and our infrastructure-as-code monorepo
• Okta for workforce identity and SSO into AWS
• NodeJS / TypeScript services MongoDB and an internal ClickHouse Grafana security telemetry pipeline
• Go for internal security tooling and detection services

We are a remote-first development organization that values flexibility in how our teams addition to supporting fully remote roles we have an office in Austin with a hybrid option available for those who live nearby and prefer in-person collaboration.

While this role is based in Austin Texas were open to exploring remote possibilities for qualified candidates.

Qualia is made up of incredibly bright mission-driven coworkers who are passionate about using technology to solve real-world problemsand were growing order to continue building an engaging and dynamic organization were committed to giving everyone the support they need to do great work.

Our benefits package is designed to allow our team members to be their best selves both in and out of the addition to comprehensive health plans a 401k program and commuter benefits we prioritize family and personal well-being through professional development parental leave and a flexible time off policy. Qualia offers a robust online onboarding program to train new hires biweekly all hands meetings and a variety of internal virtual events to keep employees connected.

We believe diverse perspectives and backgrounds are critical to building great technology and our goal is to cultivate an environment where people feel equally valued and respected. Qualia is proud to be an equal-opportunity workplace and we welcome applicants from all backgrounds regardless of race color ancestry religion gender identity or expression sexual orientation marital status age citizenship socioeconomic status disability or veteran status.

By submitting your application you acknowledge and agree to the collection processing and use of your personal information as described in our Employee Data Privacy Notice.

#LI-Remote