Senior Platform Engineer — Identity & Security (AWS PKI)

Pennymac; Westlake Village (CA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Paid Time Off

Retirement benefits

Philanthropy programs

Bonus opportunities

Job summary

PENNMAC is seeking an experienced Platform Engineer to strengthen our AWS-based infrastructure, with a focus on authentication, certificate services and encryption. You will design automation, PKI resilience, and multi-account patterns while coordinating with diverse tech teams to deliver secure, scalable solutions.

The role emphasizes IaC, Windows and Linux server management, and robust CI/CD pipelines using GitLab, with a strong security posture and mentoring responsibilities.

Qualifications

• Bachelor’s degree in CS, Engineering, or related field or equivalent experience.
• 7+ years in Platform Engineering, DevOps or SRE.
• Hands-on AWS experience: ACM, KMS, Secrets Manager, SSM, IAM, EventBridge, Lambda, S3.
• Experience operating multi-account AWS environments with cross-account IAM.
• Strong PKI and certificate lifecycle expertise including CA operations.
• Certificates on Windows (IIS) and Linux (Nginx/Apache/Tomcat).
• Strong AD experience with DNS and replication; Kerberos/NTLM knowledge.
• Encryption at rest/in transit and key management experience.
• IaC with Terraform/OpenTofu and AWS CDK; CI/CD with GitLab.
• Security best practices across cloud and CI/CD; networking basics.
• Monitoring/logging tools such as CloudWatch, NewRelic, Prometheus.
• Scripting: PowerShell, Python or Bash; configuration management: Chef/Ansible/SSM.

Responsibilities

• Design, implement and manage scalable AWS infrastructure.
• Automate certificate lifecycle at enterprise scale and deploy to workloads.
• Maintain PKI resilience including CA operations and expiry alerts.
• Build event-driven automation with EventBridge, Lambda, Secrets Manager, SSM.
• Deploy/bind certificates to AWS services and Windows/Linux servers.
• Design multi-account AWS patterns with cross-account IAM and KMS policies.
• Administer Active Directory and DNS, advance Windows auth (Kerberos/NTLM).
• Encrypt data at rest/in transit and manage keys and rotation policies.
• Develop IaC with Terraform/OpenTofu and AWS CDK; manage Windows config with Chef/Ansible.
• Build and optimize CI/CD pipelines with GitLab; enforce security practices.
• Collaborate with development teams to deliver Platform Engineering expertise.
• Monitor, log and alert for visibility; troubleshoot deployments.

Skills

AWS

PKI

IaC

Terraform/OpenTofu

GitLab CI/CD

PowerShell

Python

Ansible

Active Directory

Networking

Education

Bachelor’s degree in CS/Engineering or related field

Tools

ACM

KMS

Secrets Manager

S3

SSM

IAM

EventBridge

Lambda

CloudFormation

CDK

Job description

PENNMAC is seeking an experienced Platform Engineer to strengthen our AWS-based infrastructure, with a focus on authentication, certificate services and encryption. You will design automation, PKI resilience, and multi-account patterns while coordinating with diverse tech teams to deliver secure, scalable solutions.

The role emphasizes IaC, Windows and Linux server management, and robust CI/CD pipelines using GitLab, with a strong security posture and mentoring responsibilities.