3 months ago
Base Salary
$140k - $200k/yr
Responsibilities
- Build and maintain AWS and Kubernetes/EKS security controls, including guardrails, container security scanning, and Terraform security.
- Design and maintain access controls, RBAC models, and identity governance workflows for IAM initiatives.
- Design, deploy, and operate internal security services and platforms used by engineering teams.
- Partner with engineering teams on secure architecture decisions while enabling continued innovation.
- Collaborate with AppSec, Threat Detection, and GRC to identify and reduce risk across the stack.
- Participate in the on-call rotation for platform security incidents.
- Own security initiatives from design through production operations and write production code daily.
Requirements
- At least 5 years of experience in Information Security, SRE, or Systems Engineering.
- Strong software development skills in Python or Go, including experience building production services.
- Solid AWS experience, including IAM roles, VPCs, and native security controls.
- Hands-on Kubernetes/EKS and containerization experience, including pod security policies and container lifecycle management.
- Understanding of IAM principles, RBAC, and least-privilege access models.
- Proficiency with Terraform for infrastructure-as-code.
- Ability to independently scope and execute technical goals with minimal supervision.
- Preferred: experience with identity providers such as Okta and SAML/OIDC standards.
- Preferred: experience writing Policy-as-Code using Open Policy Agent/Rego.
- Preferred: Linux systems engineering, network security, and operating high-availability critical systems experience.
Benefits
- Competitive starting pay, discretionary annual bonus, and new-hire equity grant.
- Comprehensive health plans and 401(k) with company matching.
- Paid parental leave and flexible time off.
- Hybrid work arrangement with in-person attendance twice weekly at the New York City office; remote work is available for employees not near a hub.
About Gemini
Our mission is to unlock the next era of financial, creative, and personal freedom. Gemini (NASDAQ: GEMI) envisions a future where crypto will redesign the global financial system, the internet, and money in a way that provides greater choice, independence, and opportunity for all. As a trusted bridge between the traditional financial system and the emerging cryptoeconomy, we are providing access for individuals and institutions to a decentralized future that is more open, fair, and secure.