Staff Security Platform Engineer

📋 Description

• Own cloud and Kubernetes security across 10+ global clusters (IAM, RBAC, policies)
• Design secure-by-default platforms with guardrails and policy enforcement (OPA, Kyverno)
• Harden CI/CD and IaC pipelines — secure GitHub Actions, ArgoCD, and Terraform
• Lead secrets management — decoupled secrets architecture
• Strengthen networking fundamentals — VPC design, peering, zero-trust segmentation
• Build security-focused logging and monitoring — observability that catches threats

🎯 Requirements

• 5+ years in infrastructure security, cloud security, or security engineering
• Deep GCP and Kubernetes expertise — GKE, workload identity, network policies, RBAC
• Strong networking fundamentals — VPC design, peering, firewall architecture, zero-trust networking
• Hands-on CI/CD and IaC hardening — GitHub Actions, ArgoCD, Terraform security patterns
• Auth expertise — OAuth 2.0, OIDC, SAML; design and audit identity flows
• Policy-as-code experience — OPA, Kyverno or equivalent

🎁 Benefits

• Annual L&D budget for exploring new tools
• Access to premium AI tools (ChatGPT, Claude, Granola, etc.)
• AI-enabled tooling and tools to boost productivity