Security Platform Engineer: IaC & Automation

Fluidstack; New York, San Francisco, Austin, Seattle (NY, CA, TX, WA); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Fluidstack is seeking a Security Platform Engineer to build and own the infrastructure-as-code for campus-scale security. You will drive CI/CD for the security stack, automate remediation, and create patch pipelines to keep fleets current without manual intervention.

You will work across Windows and Linux environments, writing production-grade code and tooling for engineers and non-engineers alike, with a bias toward scalable, end-to-end automation.

Qualifications

• Experience building infrastructure as code that others deploy from.
• Ability to automate repetitive tasks and demonstrate what was eliminated.
• Ownership of CI/CD for infrastructure and rollback processes.
• Automation of Windows fleets in a Linux-dominated ecosystem.
• Maintaining survivable on-call rotations by removing root causes.
• Write production code and review others' work.
• Build tooling usable by non-engineers.
• Bonus: Terraform/Ansible/PowerShell DSC; GitHub/GitLab CI; Windows patch automation.

Responsibilities

• Build the infrastructure-as-code to stand up a site's security platform end-to-end.
• Own CI/CD and the release path for the security stack, with tested, versioned, reversible changes.
• Automate remediation to reduce manual interventions and code repeatability.
• Create the packaging and patch pipeline to keep fleets current without manual steps.
• Advance automation ahead of the platform so on-call remains lightweight as campuses grow.

Skills

Infrastructure as code

CI/CD for infrastructure

Windows fleet automation

On-call rotation management

Production code writing & review

Tooling for non-engineers

Security automation mindset

Tools

Terraform

Ansible

PowerShell DSC

GitHub Actions

GitLab CI

Chocolatey

WSUS

Intune

Prometheus

Grafana

Genetec Security Center

Job description

Fluidstack is seeking a Security Platform Engineer to build and own the infrastructure-as-code for campus-scale security. You will drive CI/CD for the security stack, automate remediation, and create patch pipelines to keep fleets current without manual intervention.

You will work across Windows and Linux environments, writing production-grade code and tooling for engineers and non-engineers alike, with a bias toward scalable, end-to-end automation.