Senior Engineer, Platform Security – Reliability

This is a fully remote position, open to applicants in California.

📋 Description

• Establish, implement, and uphold security standards for cloud and Linux environments.

• Manage security controls, guardrails, configurations, and logging for AWS and Google Cloud platforms.

• Design and enforce least-privilege access across cloud accounts, Linux systems, and internal services.

• Secure machine image pipelines through hardening, vulnerability scanning, patching, automated testing, releases, and rollbacks.

• Oversee identity and access management, secrets lifecycle, certificate lifecycle, and automated provisioning/deprovisioning.

• Convert security requirements into continuous automated compliance checks.

• Maintain an inventory of resources, configuration data, control evidence, exception reporting, and remediation of findings.

• Define service health indicators and service-level objectives.

• Engineer automated recovery solutions, self-healing mechanisms, backups, restoration procedures, and disaster recovery plans.

• Lead incident response for availability and security, including communication, follow-up, and conducting blameless post-incident reviews.

• Manage observability architecture, encompassing metrics, logs, retention, access, AWS Managed Grafana dashboards, and actionable alerts.

• Design and operate secure networking, including segmentation, DNS, TLS, routing, firewalls, VPN, and zero-trust connectivity.

• Lead the migration of legacy cloud workloads and the retirement or consolidation of unsupported or redundant services.

• Oversee cloud and high-performance computing cost visibility, attribution, budgets, spending alerts, and resource guardrails.

• Write, test, and maintain security and platform automation using Python or another general-purpose language.

• Conduct infrastructure and code reviews, mentor engineers, document systems, and foster shared ownership.

• Collaborate with both nuclear and non-software engineers and communicate security requirements in practical terms.

• Evaluate decisions regarding build versus buy and favor simple, maintainable, standard technologies.

⛳️ Requirements

• Bachelor’s degree in computer science, engineering, physics, mathematics, or a related technical field, or equivalent practical experience.

• 5+ years of pertinent experience in platform, infrastructure, cloud, security, site reliability engineering, or a related discipline.

• Experience in designing, securing, and managing production cloud infrastructure.

• Strong proficiency in AWS.

• Solid experience with Linux systems, including administration, hardening, and troubleshooting.

• Experience in infrastructure automation, including infrastructure as code, configuration management, and programming or scripting.

• Experience implementing platform security controls encompassing access management, network security, secrets management, vulnerability management, and security monitoring.

• Experience in designing and operating monitoring, recovery, and incident-response capabilities for production systems.

• Proven ability to design maintainable infrastructure and make informed technical trade-offs involving security, reliability, performance, cost, and complexity.

• Knowledge of networking fundamentals: DNS, TLS, routing, firewalls, segmentation, and remote access.

• Familiarity with platform security principles, including least-privilege access, identity and access management, secrets management, vulnerability management, and defense-in-depth.

• Capability to translate security, reliability, and operational requirements into practical, automated technical controls.

• Proficiency in using monitoring, logging, metrics, and service health indicators to identify, diagnose, and enhance security and reliability issues.

• Ability to assess technical risks, prioritize remediation efforts, and drive issues toward sustainable resolutions.

• Effective communication skills during incidents, keeping stakeholders informed about impact, status, and resolution.

• Ability to take operational ownership of systems throughout their lifecycle, including testing, documentation, and retirement.

• Excellent written and verbal communication skills tailored for both technical and non-technical audiences.

• Ability to select simple and proportionate designs and articulate build-versus-buy trade-offs.

• Some travel may be necessary for workshops and project support.

• Occasionally requires weekend work, schedule flexibility, and extended hours for launches and critical project deadlines.

• Must be authorized by the Department of Energy to access Part 810-controlled information.

• Desired qualifications include Google Cloud expertise, cloud cost management, high-performance computing, container security, self-hosted engineering services, vulnerability management, automated control evidence, scientific or engineering computing support, and an advanced degree.

🏝️ Benefits

• Competitive compensation packages.

• Medical, dental, and vision benefits for employees and their dependents.

• Paid vacation.

• 401(k) plan.

• Pre-tax health insurance, dependent care, and commuter benefits (FSA).