[Remote] Principal Security Engineer

Note: The job is a remote job and is open to candidates in USA. Avalara is a leading cloud compliance platform company that processes billions of customer API calls and tax returns annually. They are seeking a Principal Security Engineer to lead the design and implementation of security capabilities that enhance their cloud and platform security posture while driving secure practices across engineering teams.ResponsibilitiesLead the design and implementation of secure-by-default platform capabilities, including authentication, secrets management, encryption, identity controls, and security automation servicesEstablish and drive adoption of zero-trust architecture principles, least-privilege access models, and platform security standards across infrastructure and engineering environmentsServe as the technical lead for Platform Security initiatives, providing direction, prioritization, and technical leadership across multiple teams and stakeholdersAct as a subject matter expert on threat modeling, software supply chain security, cloud security, infrastructure security, and secure software development practicesDrive complex, cross-functional security programs with clearly defined milestones, measurable outcomes, and organizational impactDevelop and execute strategic remediation programs that improve security posture and reduce risk across the enterprisePartner with engineering leaders to integrate security capabilities into development platforms, CI/CD systems, and cloud-native architecturesEvaluate and implement AI-enabled approaches that improve security operations, vulnerability management, and platform protection capabilitiesMentor engineers and help elevate platform security expertise across the broader engineering organizationSkillsBachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Mathematics, or a related technical discipline12+ years of relevant professional experience, including at least 5 years focused on cloud, infrastructure, or platform securityStrong programming experience in Java, Go, Python, or similar languages used for security automation and platform engineeringDeep expertise in cloud platform security across AWS, Azure, Google Cloud, or OCI environmentsExpertise in container security, Kubernetes security, service mesh technologies, Infrastructure as Code, and cloud security posture managementStrong understanding of identity and access management, network security, vulnerability management, runtime security, and software supply chain securityProven experience designing and integrating security tooling into CI/CD pipelines, software delivery workflows, and cloud-native platformsExperience leading large-scale security initiatives involving multiple engineering teams and stakeholder groupsStrong communication and technical leadership skills with the ability to influence engineering organizationsExperience securing large-scale SaaS or cloud-native platformsExperience leading platform security or security engineering programsExperience with AI-enabled security tooling and emerging AI security technologiesSecurity certifications such as CISSP, CCSP, GCSA, or equivalentExperience establishing security standards, architecture patterns, and engineering governance practicesBenefitsPaid time offPaid parental leaveMany Avalara employees are eligible for bonusesPrivate medical, life, and disability insuranceAvalara strongly supports diversity, equity, and inclusion8 employee-run resource groups, each with senior leadership and exec sponsorshipCompany OverviewAvalara is the agentic AI platform for global tax and compliance. It was founded in 2004, and is headquartered in Pune, Maharashtra, IN, with a workforce of 1001-5000 employees. Its website is https://www.avalara.com/in/en/index.html.