Security Platform Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and manage the security fabric for Lumin Digital across numerous environments.

• Create and sustain agentic AI workflows utilizing Claude Code, MCP-based integrations, and custom agent harnesses.

• Automate processes for infrastructure code review, configuration drift detection, runbook generation, and incident timeline synthesis.

• Establish and manage security telemetry, log analytics, and observability infrastructure.

• Oversee logging clusters, ingest pipelines, OpenSearch indexes, performance tuning, and alerting systems.

• Design and implement GitOps deployment workflows using ArgoCD, Argo Workflows, and Kustomize across various AWS accounts and regions.

• Write and maintain high-quality Python applications and platform tools.

• Secure and operate Kubernetes workloads in EKS with RBAC, network policies, and deployment safeguards.

• Design and uphold secure cross-account and multi-region infrastructure patterns using KMS, IAM roles, and VPC configurations.

• Participate in an on-call rotation to restore service health, document resolutions, and minimize manual intervention.

• Assist with security incidents by maintaining logging, monitoring, data availability, and tools in collaboration with Security Operations.

• Engineer evidence collection into platform data flows for security audits and compliance frameworks.

• Collaborate with Security Engineers, Risk teams, and Site Reliability Engineering.

• Assess AI-assisted engineering patterns through proof-of-concept projects and advocate successful methodologies into standard practice.

• Perform additional duties as assigned.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field, or an equivalent combination of proven engineering experience, completed projects, and relevant certifications in platform engineering, reliability engineering, or cloud-native systems.

• Over 5 years of practical experience in platform engineering, infrastructure engineering, reliability engineering, DevSecOps, or a closely related technical field.

• Minimum of 1 year of production experience with at least 2 agentic coding tools, such as Claude Code, Gemini, Cursor, Codex, AMP, or OpenCode.

• Proven experience in building and deploying production code in Python or a similarly capable programming language, along with infrastructure-as-code tools such as Terraform.

• Demonstrated experience managing cloud-native infrastructure in production, including AWS, Kubernetes, multi-account/multi-region configurations, and CI/CD pipeline integration.

• Preferred experience with security telemetry platforms, GitOps deployment methodologies, or reliability engineering practices in a security or compliance-sensitive environment.

• Proficiency with AI-assisted development tools and the capability to design, prompt, and orchestrate agents for platform engineering and security automation workflows.

• Hands-on experience with MCP integrations, custom agent harnesses, or AI tool-use pipelines.

• Strong software engineering fundamentals, including version control, code review, testing, CI/CD, and API design.

• Solid foundation in reliability engineering, encompassing capacity planning, SLO development, on-call experience, incident management, and operational resilience.

• Practical expertise with AWS, including KMS, IAM, EKS, networking, and supporting services; Kubernetes; and Terraform or equivalent IaC tools.

• Demonstrated experience with GitOps deployment patterns and container orchestration in production settings.

• Experience with security telemetry pipelines and log analytics platforms like OpenSearch, including data normalization and enrichment.

• Familiarity with SOC 2, PCI DSS, CIS Benchmarks, and AWS Well-Architected standards.

• Excellent written and verbal communication skills, along with strong documentation, runbook, and knowledge-transfer capabilities.

• Comfort with a fully remote, asynchronous-first work culture.

• Industry certifications such as AWS Solutions Architect, AWS DevOps Engineer, AWS Security Specialty, Terraform Associate, CKA, CKS, or GCSA are appreciated but not mandatory.

• Contributions to open-source projects, agent evaluation work, public writing, or speaking engagements are considered a plus.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) with company matching.

• Flexible paid time off.

• 12 paid holidays each year.

• Paid sick leave.

• Paid parental and family leave.

• Lifestyle spending account.

• Tuition reimbursement.

• Cell phone stipend.

• Minimal travel requirements, generally 12 days or fewer per year.

• Approximately two team gatherings each year.