Senior Platform Security Engineer - CI/CD & IAM

Form3; United States; Remote; USD 165,000 - 248,000; Full time

Job summary

Form3 seeks an experienced Senior Platform Security Engineer for a contract role within the AI Resilience & Security Enhancements programme. You will build security controls into our engineering platform and developer workflows, spanning secure autonomous agent execution, CI/CD, code security, production access controls, and software supply chain security.

You will directly partner with platform, engineering and security teams to prototype and implement practical controls, document approaches,

Qualifications

• Hands-on experience in Platform Engineering, DevOps, SRE, DevSecOps or Platform Security with strong security fundamentals.
• Experience implementing security controls yourself, not just reviewing systems or findings.
• Strong understanding of CI/CD and modern software delivery incorporating security into workflows.
• Knowledge of software supply chain security, dependency management, signing, SBOMs and vulnerability management.
• Understanding of IAM, RBAC and least privilege; Kubernetes security practical knowledge.

Responsibilities

• Design, evaluate and implement controls for secure autonomous agent execution and CI/CD integration.
• Develop secure production access controls, least privilege, auditability and session controls.
• Enhance software supply chain security, including SBOMs, provenance, signing and policy enforcement.
• Produce documentation and guidance; deliver changes with low risk while preserving service availability.

Skills

Platform engineering

DevOps

SRE

DevSecOps

Platform security

Go

Python

Kubernetes

Terraform

Tools

Go

Python

Kubernetes

Terraform

Job description

Form3 seeks an experienced Senior Platform Security Engineer for a contract role within the AI Resilience & Security Enhancements programme. You will build security controls into our engineering platform and developer workflows, spanning secure autonomous agent execution, CI/CD, code security, production access controls, and software supply chain security.

You will directly partner with platform, engineering and security teams to prototype and implement practical controls, document approaches,