Staff Platform Security Engineer: Zero-Trust Cloud

Sierra Ventures; Miami (FL); Hybrid; USD 168,000 - 240,000; Full time

Benefits offered by this job

Competitive starting pay

Discretionary annual bonus

Equity grant

Comprehensive health plans

401K with company matching

Paid Parental Leave

Flexible time off

Job summary

Gemini is seeking a Staff Platform Security Engineer to build security services, tooling, and automation across AWS and Kubernetes. You will write production-grade code daily, implement security guardrails, and enable secure delivery with zero-trust and least-privilege access models.

You will collaborate with engineering teams to shape architecture, develop security monitoring, and contribute to on-call incident response. This role is hybrid with US hub offices and remote options.

Qualifications

• 8+ years of experience in security engineering or related field.
• Strong software development skills in Python or Go with production services.
• Deep security experience in AWS including IAM, VPC, KMS and native services.
• Terraform expertise for modules, CI/CD gates, policy testing and remote state.
• Kubernetes security including RBAC, policies, and runtime protection.
• Experience with distributed systems, cloud-native architectures, and SRE principles.

Responsibilities

• Build and maintain security services, tools, and automation using Python or Go.
• Design and implement controls for AWS and Kubernetes via IaC.
• Create reusable libraries and platforms enabling secure-by-default patterns.
• Develop automated security monitoring, scanning, and remediation services.
• Build CI/CD security gates and policy‑as‑code validation tools.
• Partner with engineering teams on architecture decisions and provide security guidance.
• Participate in on-call rotation for critical incidents.

Skills

Python or Go

AWS security

Terraform

Kubernetes security

Distributed systems / SRE

Security tooling

Tools

Terraform

Kubernetes

Python

Go

Job description

Gemini is seeking a Staff Platform Security Engineer to build security services, tooling, and automation across AWS and Kubernetes. You will write production-grade code daily, implement security guardrails, and enable secure delivery with zero-trust and least-privilege access models.

You will collaborate with engineering teams to shape architecture, develop security monitoring, and contribute to on-call incident response. This role is hybrid with US hub offices and remote options.