5 months ago
Base Salary
$140k - $200k/yr
Responsibilities
- Build and maintain AWS and Kubernetes/EKS security controls, including guardrails, container security scanning, and Terraform security.
- Design and maintain access controls, RBAC models, and identity governance workflows for IAM initiatives.
- Design, deploy, and operate internal security services and platforms used by engineering teams.
- Partner with engineering teams on secure architecture decisions while enabling continued innovation.
- Collaborate with AppSec, Threat Detection, and GRC to identify and reduce risk across the stack.
- Participate in the on-call rotation for platform security incidents.
- Own security initiatives from design through production operations and write production code daily.
Requirements
- At least 5 years of experience in Information Security, SRE, or Systems Engineering.
- Strong software development skills in Python or Go, including experience building production services.
- Solid AWS experience, including IAM roles, VPCs, and native security controls.
- Hands-on Kubernetes/EKS and containerization experience, including pod security policies and container lifecycle management.
- Understanding of IAM principles, RBAC, and least-privilege access models.
- Proficiency with Terraform for infrastructure-as-code.
- Ability to independently scope and execute technical goals with minimal supervision.
- Preferred: experience with identity providers such as Okta and SAML/OIDC standards.
- Preferred: experience writing Policy-as-Code using Open Policy Agent/Rego.
- Preferred: Linux systems engineering, network security, and operating high-availability critical systems experience.
Benefits
- Competitive starting pay, discretionary annual bonus, and new-hire equity grant.
- Comprehensive health plans and 401(k) with company matching.
- Paid parental leave and flexible time off.
- Hybrid work arrangement with in-person attendance twice weekly at the New York City office; remote work is available for employees not near a hub.
About Gemini
Gemini is a regulated cryptocurrency exchange and custodian for individuals and institutions, generating revenue from trading, OTC, custody, and staking fees. Its platform spans spot and derivatives markets, wallets, and institutional services, and is available in 70+ countries. Founded by Cameron and Tyler Winklevoss and headquartered in New York, it is publicly traded on Nasdaq (GEMI).