Staff Platform Security Engineer — Zero-Trust Cloud Architect

Gemini; United States; Hybrid; USD 168,000 - 240,000; Full time

Benefits offered by this job

Competitive pay

Discretionary bonus

Equity grant

Health plans

401K matching

Parental Leave

Flexible time off

Job summary

Gemini is seeking a Staff Platform Security Engineer to design and build security services and automation across cloud environments, primarily AWS. You will implement infrastructure-as-code security guardrails, secure container orchestration, and production-grade tooling.

The role emphasizes zero-trust, least-privilege access, and close collaboration with engineering teams. You will write production code daily, contribute to scalable security platforms, and support secure delivery while

Qualifications

• 8+ years of security engineering experience.
• Strong software development skills in Python or Go with production services.
• Deep experience securing AWS environments including IAM, VPC, KMS, and native services.
• Terraform expertise including modules, CI/CD gates, and remote state management.
• Kubernetes security including admission controls, RBAC, network policies, and runtime protection.
• Experience with distributed systems and cloud-native architectures.
• Ability to build, deploy, and maintain security tools in production.

Responsibilities

• Build and maintain security services, tools, and automation using Python or Go.
• Design and implement security controls for AWS and Kubernetes using infrastructure-as-code.
• Create reusable libraries and platforms for secure-by-default patterns.
• Develop automated security monitoring, scanning, and remediation services.
• Build CI/CD security gates and policy-as-code validation tools.
• Partner with engineering teams on architecture decisions and security consultation.
• Participate in on-call rotation for critical incidents.

Skills

Python or Go

AWS security

Terraform

Kubernetes security

SRE principles

Distributed systems

Production services

Job description

Gemini is seeking a Staff Platform Security Engineer to design and build security services and automation across cloud environments, primarily AWS. You will implement infrastructure-as-code security guardrails, secure container orchestration, and production-grade tooling.

The role emphasizes zero-trust, least-privilege access, and close collaboration with engineering teams. You will write production code daily, contribute to scalable security platforms, and support secure delivery while