> Markdown version of [/jobs/ext/2712651-platform-security-engineer](https://www.wearedevelopers.com/jobs/ext/2712651-platform-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Security Engineer - **Company:** Gemini, Inc. - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Salary:** $140,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Systems Engineering, Cloud Computing, Cloud Computing Security, Cyber Security, Linux, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Security, OpenID, Public Key Infrastructure, Role-Based Access Control, Security Assertion Markup Language (SAML), Software Engineering, Policy as Code, Cloud Platform System, Okta, Software Security, Kubernetes, Production Code, Terraform - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/senior-platform-security-engineer-gemini-7976526 ## About the Role You'll own security initiatives from design through production operations. This role requires strong software development skills, practical experience with AWS and Kubernetes security, and the ability to partner with engineering teams to enable secure delivery. You will also apply expertise in critical neighboring areas, including PKI, core cryptography, identity management, and network security, to ensure comprehensive protection across the stack., * 5+ years of experience in Information Security, SRE, or Systems Engineering * Strong software development skills in Python or Go with experience building production services * Solid experience with AWS (or similar cloud providers), including familiarity with IAM roles, VPCs, and native security controls * Hands-on experience with Kubernetes/EKS and containerization concepts, including pod security policies and container lifecycle * Understanding of IAM principles, RBAC, and least-privilege access models * Proficiency in Terraform for infrastructure-as-code * Ability to self-scope and execute technical goals with minimal supervision Preferred Qualifications: * Experience with identity providers (IdP) like Okta and standards like SAML/OIDC * Experience writing Policy-as-Code (e.g., Open Policy Agent/Rego) * Background in Linux systems engineering or network security * Experience building and operating high-availability critical systems ## Description The Platform Security team secures Gemini's infrastructure through service hardening and by developing and supporting a suite of foundational tools. As a Senior Platform Security Engineer, you will build and maintain security controls across diverse environments-from hardening cloud and container orchestration systems to enhancing our non-cloud infrastructure. This is a hands-on engineering role where you'll write production code daily, not just configuration., * Build and maintain security controls for AWS and Kubernetes (EKS) environments, including guardrails, container security scanning, and infrastructure-as-code (Terraform) security * Support IAM initiatives by helping to design and maintain access controls, role-based access control (RBAC) models, and identity governance workflows * Design, deploy, and maintain internal security services and platforms that other engineering teams rely on * Act as a security partner to engineering teams, helping them make secure architecture decisions without blocking innovation * Work across functions-partnering with AppSec, Threat Detection, and GRC-to identify and reduce risk across the entire stack * Participate in on-call rotation for platform security incidents ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Learning Kubernetes made easy with KubeCampus](https://www.wearedevelopers.com/magazine/348-learning-kubernetes-made-easy-with-kubecampus) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)