Senior/Staff Platform Engineer, Infrastructure & Security

Quilter; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary + equity

Health/dental/vision insurance

Unlimited PTO

Paid parental leave

Team events and offsites

Job summary

Quilter is seeking a security-focused infrastructure engineer to own and harden our cloud platforms. You will implement IAM, secrets management, audit logging, and automated controls across Kubernetes and AWS, using Terraform and IaC practices.

You will work with software engineers to embed security into reusable systems, ensure recoverability, and support SOC 2 and ISO 27001 readiness. Ideal candidates have hands-on cloud ownership, Linux troubleshooting, and scripting in Python or Go.

Qualifications

• Production cloud infrastructure ownership experience.
• Hands-on security controls experience (IAM, secrets, audit logs).
• Practical Kubernetes and IaC experience (AWS, Terraform).
• Strong Linux troubleshooting across cloud services.
• Ability to write automation/tools in Python or Go.
• Ability to translate security requirements into technical controls.

Responsibilities

• Build and maintain secure infrastructure.
• Improve cloud and Kubernetes configuration, network boundaries, machine identities, secrets management, least-privilege access, and audit logging.
• Own the infrastructure maintenance lifecycle.
• Keep images, dependencies, and infrastructure components current; investigate vulnerability findings; prioritize remediation; and roll out changes safely.
• Implement and automate compliance controls.
• Translate agreed requirements into technical controls, validation checks, access reviews, evidence collection, and remediation tooling. Work with business stakeholders on scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work.
• Make recovery dependable.
• Work with service owners to implement and test backup/restore procedures, document recovery steps, and address gaps revealed by exercises and incidents.
• Improve operational readiness.
• Partner with service owners on useful alerts, incident playbooks, and communication. Participate in production troubleshooting and follow through on corrective work.
• Contribute to infrastructure efficiency.
• Help the team understand resource usage and cost, identify capacity constraints and waste, and make targeted improvements alongside security and maintenance priorities.
• Partner on safe deployment and data access.
• Work with the engineers building our delivery, runtime, and data platforms to embed security and operational requirements into reusable systems.

Skills

Production cloud ownership

Security controls

Kubernetes

Terraform

Linux troubleshooting

Python/Go scripting

Communication

Tools

AWS

Terraform

Kubernetes

Job description

About Quilter

At Quilter, we are helping electrical engineers save time and accomplish more by automating the tedious and time‑consuming task of designing printed circuit boards (PCBs). Our small team is composed of experts in electrical engineering, electromagnetic simulation, ML/AI, and high-performance computing (HPC). We are inventing and leveraging novel techniques to solve the decades‑old problem of automating circuit board design where today hundreds of billions of dollars are spent. We have raised $25 million in Series B funding from some of the very best and are charging full‑speed toward our goal. No matter where we come from, we're united by a common vision for the future and a core set of values we think will get us there: Curiosity, Conviction, Rigor.

What You’ll Do

• Build and maintain secure infrastructure.
• Improve cloud and Kubernetes configuration, network boundaries, machine identities, secrets management, least‑privilege access, and audit logging.
• Own the infrastructure maintenance lifecycle.
• Keep images, dependencies, and infrastructure components current; investigate vulnerability findings; prioritize remediation; and roll out changes safely.
• Implement and automate compliance controls.
• Translate agreed requirements into technical controls, validation checks, access reviews, evidence collection, and remediation tooling. Work with business stakeholders on scope and audit support for SOC 2, ISO 27001, and prospective FedRAMP work.
• Make recovery dependable.
• Work with service owners to implement and test backup/restore procedures, document recovery steps, and address gaps revealed by exercises and incidents.
• Improve operational readiness.
• Partner with service owners on useful alerts, incident playbooks, and communication. Participate in production troubleshooting and follow through on corrective work.
• Contribute to infrastructure efficiency.
• Help the team understand resource usage and cost, identify capacity constraints and waste, and make targeted improvements alongside security and maintenance priorities.
• Partner on safe deployment and data access.
• Work with the engineers building our delivery, runtime, and data platforms to embed security and operational requirements into reusable systems.

What We’re Looking For

• Experience owning production cloud infrastructure, including the work of maintaining it, diagnosing failures, and making changes safely.
• Hands‑on experience implementing security controls such as IAM, secrets management, network restrictions, audit logging, vulnerability remediation, or secure configuration.
• Practical Kubernetes, container, and infrastructure‑as‑code experience. AWS and Terraform are particularly relevant; comparable experience is welcome.
• Strong troubleshooting skills across Linux, networking, cloud services, and application behavior, with the judgment to choose a simple solution appropriate to the problem.
• Ability to build and maintain tested automation and small tools in a language such as Python or Go, and to work effectively with software engineers on shared systems.
• Ability to translate security requirements into technical controls and demonstrate that they work. You can explain implementation choices, validate behavior, and provide evidence for reviewers.
• Interest in owning recurring operational work and improving how it gets done, alongside larger engineering projects.
• Clear communication and prioritization: you can explain technical risks and tradeoffs, coordinate remediation across teams, and document decisions and procedures.

Nice to Have

• Experience implementing technical controls or automating evidence for SOC 2, ISO 27001, FedRAMP, or a comparable program.
• Experience with AWS GovCloud, customer‑managed infrastructure, or restricted‑network environments.
• Familiarity with observability tools such as Prometheus, Grafana, OpenTelemetry, or cloud‑native equivalents.
• Experience with artifact signing, software provenance, or automated verification of software supply‑chain controls.
• Familiarity with GPU, ML, batch, or other compute‑intensive workloads and their capacity/cost tradeoffs.

What Success Looks Like

Access and credential controls are documented and verifiable, infrastructure updates and vulnerability findings are addressed through a repeatable process, and required evidence can be produced without repeatedly reconstructing it by hand. Recovery procedures are tested with service owners, and incident follow‑up leads to concrete improvements.

We are an equal opportunity employer. At this time, we are focused on hiring primarily within the US, with occasional exception to accommodate exceptional talent.

What we offer

• Interesting and challenging work
• Competitive salary and equity benefits
• Health, dental, and vision insurance
• Regular team events and offsites (~4x / year)
• Unlimited paid time off
• Paid parental leave

Want to learn more about Quilter, our vision, and our investors? Visit our About page and visit our Blog.