Principal Software Engineer - Security

What You'll Do As a Principal Software Engineer - Security, you will help set the technical direction for Radiant's security capabilities across the cloud platform and infrastructure, leading the design and delivery of the systems that underpin them. You'll work across identity, access control, secrets, network security, platform hardening, auditability, and compliance controls. You'll partner closely with product, infrastructure, SRE, networking, security, and compliance teams, and with customers on their most demanding security requirements. This is a hands-on technical leadership role focused on making security embedded, scalable, automated, and easy to consume across the platform, through architecture, code, and the standards other teams build on.   Key Responsibilities Set the technical vision and architecture for security systems and platform capabilities, and lead their design and implementation. Design and build core security services across IAM, RBAC, workload identity, secrets, encryption and key management, audit logging, network controls, and policy enforcement. Translate product, customer, and regulatory requirements into robust architectures, APIs, and technical designs, working closely with the Security Product Manager. Drive automation of policy enforcement, configuration hardening, detection, remediation, and software supply chain security. Ensure strong tenant isolation and least-privilege access across the control plane and network and data plane. Act as a senior technical voice in enterprise customer security reviews, audits, and incident response. Raise the security engineering bar across the organisation through mentoring, code review, and technical standards.   Your Profile Strong hands-on engineering skills in one or more systems languages such as Go or similar. Extensive experience building and operating large-scale distributed systems, with significant depth in cloud and network security, IAM, or security infrastructure. A track record of technical leadership at staff or principal level, including setting direction across multiple teams and delivering complex, high-stakes systems. Deep technical expertise across: Identity & access: IAM, RBAC/ABAC, OAuth 2.0, OIDC, SAML, SSO, federation, mTLS, workload and service identity Security controls: applied cryptography, encryption at rest and in transit, secrets management, KMS/HSM, key rotation, policy engines Infrastructure: Kubernetes internals, containers and runtime isolation, cloud networking, compute, storage Security operations: audit logging pipelines, detection engineering, vulnerability management, incident response Automation: policy-as-code, infrastructure-as-code, CI/CD security, software supply chain (signing, SBOMs, provenance) Hands-on experience with technologies such as Vault, OPA/Gatekeeper, SPIFFE/SPIRE, Kubernetes admission control and security tooling, Sigstore, SIEM platforms, cloud KMS, or similar. Deep understanding of multi-tenancy, least privilege, zero-trust architecture, threat modelling, and shared-responsibility models. Familiarity with compliance frameworks such as SOC 2 or ISO 27001, and how they translate into technical controls. Able to balance security, performance, reliability, operational complexity, and developer experience. Excellent written and verbal communication, including clear design documents and explaining complex trade-offs to technical and non-technical audiences.   What You Bring Security mindset: Think like an attacker and design systems that fail safely, without making them painful to use. Engineering excellence: Write and review code that sets the standard for correctness, reliability, and maintainability. Architectural judgement: Make sound long-term decisions on systems that are hard to change once built. Technical leadership: Influence direction across teams without relying on authority, and grow the engineers around you. Systems thinking: