2 months ago
Base Salary
$175k - $220k/yr
Responsibilities
- Build internal platform golden paths and developer tooling with the DevOps team.
- Own Google Cloud security posture, landing-zone guardrails, least-privilege IAM, networking, secrets, and key management.
- Codify secure defaults with infrastructure-as-code and replace ad hoc infrastructure with reusable self-service patterns.
- Evaluate application, infrastructure, and cloud attack surfaces and prioritize remediation by exploitability and blast radius.
- Embed security controls into CI/CD, internal tooling, LLM, and data science workflows.
- Define guardrails and best practices for agentic coding tools and product AI/LLM features.
- Improve security and compliance through a risk-based approach supporting SOC 2, ISO 27001, and ISO 27701.
- Drive platform adoption and raise security standards across engineering without formal management authority.
Requirements
- 6+ years of experience in platform engineering, infrastructure/DevOps, or site reliability, with substantial infrastructure-building experience.
- Strong Terraform and infrastructure-as-code experience, including reusable self-service platform patterns.
- Hands-on Google Cloud experience, or transferable AWS or Azure experience, including IAM, networking, and least-privilege design.
- Strong production experience with Kubernetes and containerized workloads.
- Practical experience embedding SAST, SCA, secret scanning, and software supply-chain controls into CI/CD pipelines.
- Strong programming or scripting ability in Python, Go, or a similar language.
- Ability to design for least privilege and assess how systems may be abused.
- Ability to influence engineering teams and drive platform adoption without formal management authority.
- Preferred experience standing up an internal developer platform or paved-road program from scratch.
- Preferred knowledge of AI/LLM security risks and safe use of AI tools.
- Preferred SOC 2, ISO 27001, or similar compliance experience.
- Experience securing data warehouses or large data pipelines is preferred; Snowflake experience is a plus.
- Familiarity with construction technology, BIM/3D data, or other domain-rich data products is preferred.
Benefits
- Comprehensive health, dental, and vision benefits for employees and their families.
- Unlimited paid time off.
- 401(k) program.
- Flexible work environment.
