Senior AI Platform Security Architect

FrontApp Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Front is seeking a Platform Engineer to define how we build and run internal software, own the reference architecture, and enforce security requirements for governed data. You will partner closely with our product engineering org and extend their production practices to internal systems while maintaining strong guardrails and vendor-neutral standards.

You will own the cloud stack (AWS and Snowflake), drive infrastructure as code, manage environments, and run the observability and cost controls.

Qualifications

• You've established a platform, DevOps or infrastructure practice somewhere it didn't exist.
• Deep hands-on experience running production infrastructure in a major cloud.
• Infrastructure as code in production at scale: Terraform, Pulumi or CloudFormation.
• Owning CI/CD pipelines end to end, including gates; containers and orchestration.
• Strong Python or Go for automation and tooling.
• Practical infrastructure security and least-privilege design.
• Clear written communication and ability to document standards engineers actually use.

Responsibilities

• Define internal engineering standards for services, deployment, environments and production readiness.
• Partner with product engineering and extend tooling to internal platforms; justify divergences where needed.
• Define reference architecture and security requirements for governed data.
• Own the review bar and decide what can ship, with clear reasons and a path forward.
• Keep standards current; retire outdated ones and prevent documentation drift.
• Collaborate across GTM Systems, Data, Enterprise Security and Legal to build consensus.
• Own cloud infrastructure on AWS and Snowflake: compute, networking, data stores, DNS, certificates.
• Define infrastructure as code and manage state, modules and drift.
• Run observability, cost controls and ensure environments are stable and reproducible.
• Secure the platform and SDLC: IAM, SSO/SCIM, secret management, and vulnerability handling.

Skills

Platform engineering

DevOps

Infrastructure as code

CI/CD

Python

Go

Security engineering

Cloud architecture

IAM & SSO

SQL

Tools

Terraform

Pulumi

CloudFormation

AWS

Snowflake

Docker

Kubernetes

Okta

SAML/OIDC

Job description

Front is seeking a Platform Engineer to define how we build and run internal software, own the reference architecture, and enforce security requirements for governed data. You will partner closely with our product engineering org and extend their production practices to internal systems while maintaining strong guardrails and vendor-neutral standards.

You will own the cloud stack (AWS and Snowflake), drive infrastructure as code, manage environments, and run the observability and cost controls.