Senior Software Engineer - Cloud & Platform Security

Who we are

Atoms is building the machines that power the next era of progress.

Over the last decade, software has transformed the digital world. But the physical world, where food is made, minerals are mined, goods are moved, and industries are run, remains far less intelligent, far less efficient, and far more constrained. We’re changing that.

Atoms builds Physical AI— real-world robots for the industries that move civilization forward, starting with food, mining, and transport. Our systems are designed to understand, predict, and control the real world with precision, turning complex physical operations into something more reliable, more scalable, and more productive.

This work requires more than robotics. It requires deep integration across hardware, software, AI, operations, manufacturing, and real estate. We don’t just build machines in a lab. We deploy them into real environments, operate them, learn from them, and improve them until they work at scale.

We are roboticists, engineers, operators, and builders. We believe the next great technology companies will not only transform information, but the physical systems that shape everyday life.

If you want to work on hard problems with real-world impact, join us.

What you’ll do

As a Senior Software Engineer focused on Cloud & Platform Security, you’ll work directly with our Infrastructure team to secure the systems that manage and control our fleet. Rather than duplicating the team’s existing cloud and Kubernetes ownership, you’ll bring deep security expertise across identity, secrets, network segmentation, and the fleet-management and remote-vehicle-control APIs that represent some of the highest-impact systems in our environment.

• Design and enforce least-privilege access across cloud environments, with a focus on service identities and other non-human access.
• Strengthen secrets and credential management using Vault, cloud KMS, or equivalent systems.
• Threat model and review fleet telemetry, dispatch, and remote-vehicle-control APIs, including authentication, authorization, rate limiting, and replay protection.
• Design and improve network segmentation to isolate fleet-management, dispatch, and remote-control systems from corporate and consumer-facing environments.
• Partner with Infrastructure engineers during architecture and design reviews to identify security requirements before services reach production.
• Review and improve Kubernetes security controls, including RBAC, network policies, and pod security standards, while partnering with the Infrastructure team that owns the platform.

What we’re looking for

We’re looking for a hands-on security engineer who can work as an embedded partner to an experienced Infrastructure team. You should be comfortable going deep on cloud and platform security, influencing technical decisions, and helping engineers build secure systems without operating as a gatekeeper..

Basic qualifications

• 3+ years of experience in cloud, infrastructure, or platform security.
• Hands-on experience working with production Kubernetes environments.
• Strong understanding of API security, including OAuth/OIDC, mTLS, authentication, and authorization design.
• Experience designing or reviewing both coarse-grained and fine-grained authorization models.
• Experience with secrets-management systems such as HashiCorp Vault, cloud KMS, or equivalent technologies.
• Experience managing or securing non-human identities and service-to-service access.
• Strong understanding of network segmentation and access boundaries in cloud environments.
• Demonstrated ability to work closely with infrastructure and software engineering teams and influence security decisions through collaboration.

Nice to have

• Experience securing real-time or low-latency control-plane systems.
• Familiarity with service mesh security and workload-to-workload mTLS using Istio or similar technologies.

Why join us

At Atoms, you’ll work on one of the defining challenges of our time—bringing automation into the physical world to drive real, lasting impact. We exist to uncover valuable unknown truths and turn them into progress, which means constantly pushing beyond what’s known and building what doesn’t yet exist. The work is ambitious and often challenging, but it’s grounded in a shared sense of purpose and a team committed to seeing it through together. Our work only matters if it serves others, and we know that meaningful progress depends on the trust of the people we serve and the strength of our team—so we invest in both, creating an environment where you can do your best work and grow.

What else you need to know

This role is based in our San Francisco office. Atoms is a company driven by invention and continuous change - we are constantly reimagining our industries, building new products, and refining how we operate. We do our best work together. That’s why all of our office-based teams work onsite, five days a week.

The base salary range for this role is $167,000 - $230,000 per year.

Actual compensation will be determined on an individual basis and may vary depending on experience, skills, and qualifications.

Base salary is just one part of your total rewards package. You may also be eligible for equity awards and an annual performance-based bonus.

Benefits Summary (USA Full-Time Exempt Employees):

• Medical, dental, and vision insurance (multiple plans, incl. HSA options).
• Company-paid life and disability insurance (short- and long-term).
• Voluntary insurance: accident, critical illness, hospital indemnity.
• Optional supplemental life insurance for self, spouse, and children.
• Pet insurance discount.
• 401(k).
• Health Savings Account (HSA)
• Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)
• Time Off policies:
• Discretionary vacation days
• 8 paid holidays per year
• Paid sick time
• Paid Bereavement leave
• Paid Parental Leave

Benefits are subject to change at the company's discretion.
Atoms accepts applications on an ongoing basis.

Ready to join us as we serve those who serve others? 

#LI-Onsite