4 months ago
Base Salary
$175k - $220k/yr
Responsibilities
- Build internal platform golden paths and developer tooling with the DevOps team.
- Own Google Cloud security posture, landing-zone guardrails, least-privilege IAM, networking, secrets, and key management.
- Codify secure defaults with infrastructure-as-code and replace ad hoc infrastructure with reusable self-service patterns.
- Evaluate application, infrastructure, and cloud attack surfaces and prioritize remediation by exploitability and blast radius.
- Embed security controls into CI/CD, internal tooling, LLM, and data science workflows.
- Define guardrails and best practices for agentic coding tools and product AI/LLM features.
- Improve security and compliance through a risk-based approach supporting SOC 2, ISO 27001, and ISO 27701.
- Drive platform adoption and raise security standards across engineering without formal management authority.
Requirements
- 6+ years of experience in platform engineering, infrastructure/DevOps, or site reliability, with substantial infrastructure-building experience.
- Strong Terraform and infrastructure-as-code experience, including reusable self-service platform patterns.
- Hands-on Google Cloud experience, or transferable AWS or Azure experience, including IAM, networking, and least-privilege design.
- Strong production experience with Kubernetes and containerized workloads.
- Practical experience embedding SAST, SCA, secret scanning, and software supply-chain controls into CI/CD pipelines.
- Strong programming or scripting ability in Python, Go, or a similar language.
- Ability to design for least privilege and assess how systems may be abused.
- Ability to influence engineering teams and drive platform adoption without formal management authority.
- Preferred experience standing up an internal developer platform or paved-road program from scratch.
- Preferred knowledge of AI/LLM security risks and safe use of AI tools.
- Preferred SOC 2, ISO 27001, or similar compliance experience.
- Experience securing data warehouses or large data pipelines is preferred; Snowflake experience is a plus.
- Familiarity with construction technology, BIM/3D data, or other domain-rich data products is preferred.
Benefits
- Comprehensive health, dental, and vision benefits for employees and their families.
- Unlimited paid time off.
- 401(k) program.
- Flexible work environment.
About Doxel
Doxel builds an AI-driven platform that automates construction progress tracking by fusing site scans with BIM, schedule, and budget data, giving owners and contractors objective status and early risk signals. It sells its software as a subscription with mobile and web apps used on complex capital projects such as hospitals and data centers. Founded in 2016 and headquartered in Menlo Park, the privately held company counts Shell, Genentech, HCA Healthcare, Kaiser, Turner, and Layton among its customers.