Senior/Staff Platform Engineer, Infrastructure & Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and sustain secure cloud and Kubernetes infrastructure.

• Enhance network boundaries, machine identities, secrets management, least-privilege access, and audit logging.

• Manage the infrastructure maintenance lifecycle, which includes image, dependency, and infrastructure updates.

• Examine vulnerability findings, prioritize remediation efforts, and implement changes safely.

• Implement and automate compliance controls, validation checks, access reviews, evidence collection, and remediation tools.

• Assist with SOC 2, ISO 27001, and potential FedRAMP compliance initiatives.

• Design and test backup and restore procedures, while documenting recovery steps.

• Collaborate with service owners on alerts, incident playbooks, communication, production troubleshooting, and corrective actions.

• Evaluate resource usage, cost, capacity constraints, and waste to enhance infrastructure efficiency.

• Collaborate with delivery, runtime, and data platform engineers to integrate security and operational requirements into reusable systems.

• Own systems from design through operation and contribute to shaping the technical direction of the Platform team.

⛳️ Requirements

• Proven experience managing production cloud infrastructure, including maintenance, diagnosing failures, and implementing changes safely.

• Practical experience in implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configurations.

• Hands-on experience with Kubernetes, containers, and infrastructure-as-code.

• Relevant experience with AWS and Terraform; comparable experience is also valued.

• Strong troubleshooting abilities across Linux, networking, cloud services, and application behavior.

• Capability to build and maintain tested automation and small tools using Python or Go.

• Ability to collaborate effectively with software engineers on shared systems.

• Skill in translating security requirements into technical controls and verifying their effectiveness.

• Interest in managing ongoing operational tasks and enhancing processes.

• Clear communication skills and prioritization; ability to articulate technical risks and trade-offs, coordinate remediation across teams, and document decisions and procedures.

• Experience in implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or similar programs is preferred.

• Familiarity with AWS GovCloud, customer-managed infrastructure, or restricted-network environments is advantageous.

• Experience with Prometheus, Grafana, OpenTelemetry, or cloud-native alternatives is a bonus.

• Knowledge of artifact signing, software provenance, or automated verification of software supply-chain controls is desirable.

• Familiarity with GPU, ML, batch, or other compute-intensive workloads and their capacity/cost trade-offs is beneficial.

• Primarily hiring within the US; candidates must be legally authorized to work in the US for any employer.

• Applicants must specify if visa sponsorship is needed.

🏝️ Benefits

• Competitive salary and equity benefits.

• Health, dental, and vision insurance.

• Regular team events and offsites (~4 times a year).

• Unlimited paid time off.

• Paid parental leave.