Senior Cloud Platform Security Engineer (IAM & CI/CD)

buspatrol.com; Austin (TX); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary & benefits package

Unlimited PTO

Mission-driven safety focus

Modern cloud, automation, and security

Collaborative culture and technical成长

Job summary

BusPatrol is seeking a Sr Platform Security Engineer to secure the platform by default, reduce blast radius, and automate guardrails across cloud environments. You will partner with DevOps and engineering teams to implement reusable security controls and scalable patterns.

This hybrid Austin role focuses on platform security engineering, governance, and incident response, enabling teams to move fast with confidence while protecting critical systems for student safety.

Qualifications

• 8-10+ years in cloud/platform security or DevSecOps.
• Hands-on security of multi-account AWS environments.
• Experience with IAM/IAM Identity Center, KMS, Secrets Manager, and CloudTrail/Governance services.
• Infrastructure-as-Code security via Terraform, CDK, or CloudFormation.
• Experience designing least-privilege access and privileged-access controls.
• Secure CI/CD pipelines, containers, and software supply chain.
• Vulnerability management, risk prioritization, and remediation tracking.
• Policy-as-code, guardrails, and security automation.

Responsibilities

• Design and implement security controls across AWS multi-account environments.
• Enforce least-privilege IAM patterns and cross-account access.
• Develop secure Terraform modules and CDK constructs for platform services.
• Evolve organizational guardrails, service control policies, and governance.
• Secure cloud networking, VPNs, Direct Connect, and segmentation.
• Manage secrets, encryption, TLS, and credential rotation.
• Integrate security checks into GitHub Actions and pipelines.
• Create policy-as-code and runbooks for secure patterns.
• Collaborate with engineering to define secure golden paths and templates.
• Maintain security telemetry and incident response capabilities.

Skills

Cloud security

IAM & access control

IaC security

Cloud networking

CI/CD security

Threat & vulnerability mgmt

Security automation

Incident response

Documentation

Cross-functional leadership

Tools

AWS IAM

KMS

Secrets Manager

Parameter Store

CloudTrail

GuardDuty

Security Hub

AWS Config

Organizations/SCPs

Job description

BusPatrol is seeking a Sr Platform Security Engineer to secure the platform by default, reduce blast radius, and automate guardrails across cloud environments. You will partner with DevOps and engineering teams to implement reusable security controls and scalable patterns.

This hybrid Austin role focuses on platform security engineering, governance, and incident response, enabling teams to move fast with confidence while protecting critical systems for student safety.