Remote Platform Security Engineer, AI-Driven Cloud Security

Jobgether; United States; Remote; USD 200,000 - 250,000; Full time

Benefits offered by this job

Equity participation

Performance bonus

Medical Insurance

Remote stipend for setup

Flexible hours

Fully remote work environment

Unlimited vacation

401(k) plan

Wellness benefit

Meal benefit

Global off-sites

Job summary

Jobgether is seeking a Staff Platform Security Engineer to own security across AWS and Kubernetes infrastructure, supporting products used by millions of people. You will write code, build controls, respond to incidents, and drive remediation in a remote environment.

You will lead security architecture, implement least-privilege models, Harden CI/CD and software supply chains, and partner with cross‑functional teams to embed security without slowing delivery.

Qualifications

• 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or related engineering discipline.
• Deep hands-on experience securing production AWS environments, including IAM and resource policies, workload identity, network security, secrets management, logging, organization-level controls, and common cloud security failure modes.
• Strong production Kubernetes security experience, preferably with Amazon EKS, including RBAC, workload identity, admission policies, network policies, pod security, secrets, and cluster hardening.
• Experience securing mission-critical systems where compromise, excessive privilege, or loss of availability could have significant customer or business consequences.
• Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across both human and machine access.
• Experience securing CI/CD pipelines and software supply chains, including GitHub Actions or comparable systems, build runners, workload federation, artifacts, and production deployment paths.
• Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar technologies.
• Ability to write production-quality code and automation using a language such as TypeScript, Python, Go, or Rust.

Responsibilities

• Own and continuously improve security across a multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails.
• Secure production Kubernetes environments running on Amazon EKS, covering cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation.
• Design and implement least-privilege access models for engineers, services, and automation, including scoped, auditable, and time-bound access to sensitive production systems.
• Protect mission-critical infrastructure supporting systems that process sensitive information and high-value operations.
• Lead security architecture and design for new infrastructure, platform services, and major architectural changes.
• Build reusable infrastructure and policy-as-code controls using technologies such as Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation.
• Harden CI/CD and software supply chains, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and production access.
• Develop security automation that identifies and remediates cloud and Kubernetes risks at scale, using AI-assisted workflows where they can materially improve analysis, coverage, or response speed.
• Partner closely with Infrastructure, SRE, Developer Experience, and product engineering teams to establish practical platform security standards and drive adoption.
• Take ownership of security issues from initial investigation through implementation, remediation, and production verification.
• Contribute directly to incident response and security improvements while maintaining a balance between strong controls and engineering velocity.

Skills

Platform security

AWS security

Kubernetes security

IaC - Pulumi/Terraform

Programming: TS/Python/Go/Rust

Incident response

Security architecture

CI/CD security

GitHub Actions

Tools

Pulumi

Terraform

GitHub Actions

Kubernetes policy engines

Job description

Jobgether is seeking a Staff Platform Security Engineer to own security across AWS and Kubernetes infrastructure, supporting products used by millions of people. You will write code, build controls, respond to incidents, and drive remediation in a remote environment.

You will lead security architecture, implement least-privilege models, Harden CI/CD and software supply chains, and partner with cross‑functional teams to embed security without slowing delivery.