Senior Platform Security Engineer - Cloud & IAM

US Health Partners, LLC; Austin (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

BusPatrol in Austin, TX seeks a Sr Platform Security Engineer to strengthen the platform's security by default. This hands-on role focuses on AWS identity, multi-account guardrails, network security, encryption, IaC, and CI/CD security controls across the production environment.

You will partner with DevOps, architecture, and Cyber Security to implement reusable controls, build secure golden paths, and advance telemetry with GuardDuty, Security Hub, CloudTrail, and Datadog while mentoring

Qualifications

• 8–10+ years in cloud/platform security or DevSecOps.
• Deep hands-on experience securing production AWS environments across multiple accounts.
• Strong knowledge of IAM, KMS, Secrets Manager, CloudTrail, GuardDuty, Security Hub, AWS Config, SCPs, and VPC security.
• Experience implementing IaC security with Terraform, AWS CDK, CloudFormation.
• Experience enforcing least-privilege access and cross-account permissions.
• Experience securing CI/CD pipelines and container deployments.
• Practical understanding of cloud networking segmentation.
• Experience with vulnerability management and risk remediation.
• Policy-as-code, security automation, and compliance evidence collection.
• Strong Linux, networking, scripting, Git, and troubleshooting.
• Ability to communicate with engineers, architects, security professionals, auditors.

Responsibilities

• Design, implement, and improve security controls across multi-account AWS.
• Establish least-privilege identity patterns using AWS IAM, IAM Identity Center, Entra ID, permission sets, groups, cross-account roles, service roles.
• Build and maintain secure Terraform modules and AWS CDK constructs for platform services.
• Evolve AWS Organizations, Control Tower, SCPs to improve governance.
• Secure cloud networking: VPCs, routing, security groups, WAF, VPNs, Direct Connect.
• Implement and operate secrets-management and encryption patterns (KMS, Secrets Manager, TLS).
• Integrate security checks into GitHub Actions and delivery workflows.
• Develop policy-as-code and preventive guardrails (Config, SCPs, OPA, Conftest, Checkov, tfsec).
• Partner with engineering to define secure golden paths and templates.
• Operate and improve cloud security telemetry (GuardDuty, Security Hub, CloudTrail, CloudWatch, Datadog).
• Triage and remediate findings from CNAPP, CSPM, vulnerability-management tools.
• Support incident response and post-incident improvements.
• Produce architecture decisions and runbooks; collaborate on audits (SOC 2, ISO 27001, NIST).
• Mentor engineers and contribute to secure AI-enabled workflows.

Skills

AWS platform security

IAM governance

Infrastructure as Code security

CI/CD security controls

Vulnerability management

Security telemetry

Incident response

Linux troubleshooting

Networking security

Security automation

Tools

Terraform

AWS CDK

CloudFormation

SCPs

Checkov

tfsec

GitHub Actions

Wiz

Datadog

KMS

Job description

BusPatrol in Austin, TX seeks a Sr Platform Security Engineer to strengthen the platform's security by default. This hands-on role focuses on AWS identity, multi-account guardrails, network security, encryption, IaC, and CI/CD security controls across the production environment.

You will partner with DevOps, architecture, and Cyber Security to implement reusable controls, build secure golden paths, and advance telemetry with GuardDuty, Security Hub, CloudTrail, and Datadog while mentoring