# Senior Cloud Infrastructure Security Engineer

[Flexport](https://gurify.com/jobs?q=Flexport) · Amsterdam, Netherlands · Posted today

Senior

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/flexport/jobs/8258468)

## Job description

### About Flexport:

At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.

All security disciplines work under the umbrella of the combined PSI (Platform, Security & Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. This is not a compliance or certification role. You won't be measured on audit portfolios. You'll be measured on the guardrails you build and whether engineering teams reach for them by default.

A misconfigured IAM boundary here doesn't just degrade a dashboard: it can stall a customs filing or strand a container. Flexport also runs a genuinely heterogeneous estate: hundreds of services, carrier and customs integrations, and infrastructure spanning three continents, which makes multi-account architecture and cross-border data handling real problems rather than exam questions.

### What You'll Do

### Architecture & guardrails

- Design and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns for new services.

- Fix the Terraform module, not the finding — drive remediation-at-source so misconfigurations get closed at the pattern level, not one ticket at a time.

### Kubernetes & workload security

- Harden our Kubernetes platform: pod security, service mesh and network policy, secrets management, and supply-chain controls (image provenance and signing).

- Partner with platform engineers so new services inherit secure defaults instead of requesting them after the fact.

### Policy & automation

- Build and maintain policy-as-code and IaC scanning that block risky patterns in CI.

- Write real code — Go or Python, shipped through the same CI/CD the rest of engineering uses.

### Partnership

- Act as the local technical voice on cloud and infrastructure security for our Amsterdam engineering teams, and partner closely with the US-based cloud security team.

### You Should Have

- Typically 5–8 years of experience in cloud, infrastructure, or platform security engineering, including hands-on AWS and Kubernetes work — we care more about what you've built than the exact number. If you meet most of this, apply.

- Proficiency in at least one compiled language (Go or similar) and one scripting language (Python or similar).

- Experience with infrastructure-as-code (Terraform or similar) and a GitOps delivery model — changes shipped through code review, not tickets and manual steps.

- Working knowledge of IAM and least-privilege design across cloud and container environments.

### Nice to Have

- Experience with cloud security posture tooling (Wiz, Orca, Prisma, or similar) as a signal source rather than an end in itself.

- Software supply-chain security experience (SLSA, artifact signing, provenance).

- Familiarity with EU data-residency and cross-border data-handling considerations.

- Multi-cloud experience.

### How We Work

- In Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together.

- We stay closely aligned with our coworkers on other continents.

- We have the latest hardware and software, including frontier AI models on day one.

- We're agile, but not dogmatic. Teams decide how they work best.

### Why This Role Is Special

- You'll inherit a real, established estate with legacy to pave over — not a blank slate. If you want the harder, more honest version of greenfield work, this is it.

- This is a builder's cloud security role in a market where the comparable senior openings skew toward certification and audit work. You won't be asked to own a PCI portfolio here.

- You're part of PSI: security is treated as infrastructure with real engineering quality bars, not a policy function.

- We sponsor visas for the right candidate.

### What's in it for you

- An opportunity to contribute to one of the fastest-growing companies, where you'll have the chance to create a global impact while being part of a thriving multinational environment.

- Daily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on a daily basis.

- Commute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam.

- 25 working days as vacation days based on full-time employment.

- Health insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.

- A defined pension contribution scheme.

- Equity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.

- Employee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members.

- Parental leave benefit: Flexport is here to support you and your family during one of the most important times in life — the birth of a child. Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.

### Commitment to Equal Opportunity

At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.

### Global Data Privacy Notice for Job Candidates and Applicants

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.

**Live in Flexport’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- FL [Senior Security Engineer, Corporate Security](https://gurify.com/job/senior-security-engineer-corporate-security-at-flexport-90232267f77b) Flexport · Amsterdam, Netherlands · today
- FL [Senior Security Engineer, Detection & Response](https://gurify.com/job/senior-security-engineer-detection-response-at-flexport-606ae08d1e0a) Flexport · Amsterdam, Netherlands · 3 days ago
- WO [Senior Cloud Security Engineer](https://gurify.com/job/senior-cloud-security-engineer-at-workatbackbase-b835034d650d) Workatbackbase · Amsterdam · 2 weeks ago
- CA [Lead Security Engineer](https://gurify.com/job/lead-security-engineer-at-catawiki-ded0f7644020) Catawiki · Amsterdam, Netherlands · last week
- WE [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-wetravel-db0353704e79) Wetravel · Amsterdam · 3 weeks ago
- WE [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-wetravel-3f868b4d24ac) Wetravel · Amsterdam · 3 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Cloud Infrastructure Security Engineer","description":"\u003Ch3\u003EAbout Flexport:\u003C/h3\u003E\u003Cp\u003EAt Flexport, we believe global trade can move the human race forward. That\u2019s why it\u2019s our mission to make global commerce so easy there will be more of it. We\u2019re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes\u2014from emerging brands to Fortune 500s\u2014use Flexport technology to move more than $19B of merchandise across 112 countries a year.\u003C/p\u003E\u003Cp\u003EThe recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.\u003C/p\u003E\u003Cp\u003EAll security disciplines work under the umbrella of the combined PSI (Platform, Security \u0026amp; Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. This is not a compliance or certification role. You won\u0026#39;t be measured on audit portfolios. You\u0026#39;ll be measured on the guardrails you build and whether engineering teams reach for them by default.\u003C/p\u003E\u003Cp\u003EA misconfigured IAM boundary here doesn\u0026#39;t just degrade a dashboard: it can stall a customs filing or strand a container. Flexport also runs a genuinely heterogeneous estate: hundreds of services, carrier and customs integrations, and infrastructure spanning three continents, which makes multi-account architecture and cross-border data handling real problems rather than exam questions.\u003C/p\u003E\u003Ch3\u003EWhat You\u0026#39;ll Do\u003C/h3\u003E\u003Ch3\u003EArchitecture \u0026amp; guardrails\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EDesign and review cloud security architecture for AWS and Kubernetes: account structure, network segmentation, workload identity, and secure-by-default patterns for new services.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFix the Terraform module, not the finding \u2014 drive remediation-at-source so misconfigurations get closed at the pattern level, not one ticket at a time.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EKubernetes \u0026amp; workload security\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHarden our Kubernetes platform: pod security, service mesh and network policy, secrets management, and supply-chain controls (image provenance and signing).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with platform engineers so new services inherit secure defaults instead of requesting them after the fact.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPolicy \u0026amp; automation\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EBuild and maintain policy-as-code and IaC scanning that block risky patterns in CI.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWrite real code \u2014 Go or Python, shipped through the same CI/CD the rest of engineering uses.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPartnership\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EAct as the local technical voice on cloud and infrastructure security for our Amsterdam engineering teams, and partner closely with the US-based cloud security team.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EYou Should Have\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ETypically 5\u20138 years of experience in cloud, infrastructure, or platform security engineering, including hands-on AWS and Kubernetes work \u2014 we care more about what you\u0026#39;ve built than the exact number. If you meet most of this, apply.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProficiency in at least one compiled language (Go or similar) and one scripting language (Python or similar).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with infrastructure-as-code (Terraform or similar) and a GitOps delivery model \u2014 changes shipped through code review, not tickets and manual steps.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of IAM and least-privilege design across cloud and container environments.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ENice to Have\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EExperience with cloud security posture tooling (Wiz, Orca, Prisma, or similar) as a signal source rather than an end in itself.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESoftware supply-chain security experience (SLSA, artifact signing, provenance).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with EU data-residency and cross-border data-handling considerations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMulti-cloud experience.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EHow We Work\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EIn Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe stay closely aligned with our coworkers on other continents.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe have the latest hardware and software, including frontier AI models on day one.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe\u0026#39;re agile, but not dogmatic. Teams decide how they work best.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhy This Role Is Special\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EYou\u0026#39;ll inherit a real, established estate with legacy to pave over \u2014 not a blank slate. If you want the harder, more honest version of greenfield work, this is it.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EThis is a builder\u0026#39;s cloud security role in a market where the comparable senior openings skew toward certification and audit work. You won\u0026#39;t be asked to own a PCI portfolio here.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EYou\u0026#39;re part of PSI: security is treated as infrastructure with real engineering quality bars, not a policy function.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe sponsor visas for the right candidate.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat\u0026#39;s in it for you\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EAn opportunity to contribute to one of the fastest-growing companies, where you\u0026#39;ll have the chance to create a global impact while being part of a thriving multinational environment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDaily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on a daily basis.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECommute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E25 working days as vacation days based on full-time employment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHealth insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA defined pension contribution scheme.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEquity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEmployee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EParental leave benefit: Flexport is here to support you and your family during one of the most important times in life \u2014 the birth of a child. Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ECommitment to Equal Opportunity\u003C/h3\u003E\u003Cp\u003EAt Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.\u003C/p\u003E\u003Ch3\u003EGlobal Data Privacy Notice for Job Candidates and Applicants\u003C/h3\u003E\u003Cp\u003EDepending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"senior-cloud-infrastructure-security-engineer-at-flexport-eb174a1bf78b"},"url":"https://gurify.com/job/senior-cloud-infrastructure-security-engineer-at-flexport-eb174a1bf78b","datePosted":"2026-10-12","validThrough":"2026-11-26T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Flexport","sameAs":"https://job-boards.greenhouse.io/flexport"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"NL","addressLocality":"Amsterdam"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Netherlands","item":"https://gurify.com/jobs/netherlands"},{"@type":"ListItem","position":3,"name":"Senior Cloud Infrastructure Security Engineer","item":"https://gurify.com/job/senior-cloud-infrastructure-security-engineer-at-flexport-eb174a1bf78b"}]}
```